PT-2006-4670 · Mozilla+1 · Firefox+3

Shutdown

·

Publicado

2006-07-27

·

Atualizado

2018-10-17

·

CVE-2006-3810

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.5 through 1.5.0.4 Mozilla Thunderbird versions 1.5 through 1.5.0.4 SeaMonkey versions 1.0 through 1.0.2
Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct. This could potentially lead to unauthorized actions on a user's session.
Recommendations For Mozilla Firefox versions 1.5 through 1.5.0.4, update to version 1.5.0.5 or later. For Mozilla Thunderbird versions 1.5 through 1.5.0.4, update to version 1.5.0.5 or later. For SeaMonkey versions 1.0 through 1.0.2, update to version 1.0.3 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-3810
DSA-1159
HPSBUX02153
RHSA-2006:0608
RHSA-2006:0609
RHSA-2006:0610
RHSA-2006:0611
RHSA-2006_0609
RHSA-2006_0610
RHSA-2006_0611

Produtos afetados

Firefox
Thunderbird
Red Hat
Seamonkey