PT-2007-1250 · Mozilla · Firefox

Tony Chang · Publicado 2007-02-07 · Atualizado 2008-09-05 · CVE-2006-6971

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 2.0

Description The issue allows remote attackers to bypass the Phishing Protection mechanism by representing an IP address in various formats, including dotted-hex, dotted-octal, single decimal integer, single hex integer, or single octal integer, which is not captured by the blacklist filter.

Recommendations For Mozilla Firefox version 2.0, update the Phishing Protection mechanism to correctly handle different IP address formats or apply a configuration change to enhance the blacklist filter to include these formats.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-6971

Produtos afetados

Firefox

Referências · 4

• 🔥 http://sla.ckers.org/forum/read.php?13,2253 · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=356355 · Exploit
• http://sla.ckers.org/forum/read.php?13%2C2253 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6971 · Nota de Segurança