PT-2006-2721 · Mozilla+2 · Suite+4

Claus Jörgensen

+1

·

Publicado

2006-04-14

·

Atualizado

2018-10-18

·

CVE-2006-1729

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 1.0.x through 1.5.0.1 Mozilla Suite versions prior to 1.7.13 SeaMonkey versions prior to 1.0.1
Description: The issue allows remote attackers to read arbitrary files. This can be achieved by either inserting the target filename into a text box and then turning that box into a file upload control, or by changing the type of the input control associated with an event handler.
Recommendations: For Mozilla Firefox versions 1.0.x through 1.5.0.1, update to version 1.5.0.2 or later. For Mozilla Suite versions prior to 1.7.13, update to version 1.7.13 or later. For SeaMonkey versions prior to 1.0.1, update to version 1.0.1 or later.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-1729
DSA-1044-1
DSA-1046-1
DSA-1051-1
DSA-1134-1
HPSBUX02153
RHSA-2006:0328
RHSA-2006:0329
RHSA-2006_0328
RHSA-2006_0329

Produtos afetados

Hp-Ux
Firefox
Suite
Red Hat
Seamonkey