PT-2006-4668 · Mozilla+1 · Firefox+2
Moz_Bug_R_A4
·
Publicado
2006-07-27
·
Atualizado
2018-10-17
·
CVE-2006-3808
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 1.5.0.5
SeaMonkey versions prior to 1.0.3
Description
The issue allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges. This is achieved via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.
Recommendations
For Mozilla Firefox versions prior to 1.5.0.5, update to version 1.5.0.5 or later to resolve the issue.
For SeaMonkey versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Red Hat
Seamonkey