PT-2007-1250 · Mozilla · Firefox

Tony Chang · Published 2007-02-07 · Updated 2008-09-05 · CVE-2006-6971

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 2.0

Description The issue allows remote attackers to bypass the Phishing Protection mechanism by representing an IP address in various formats, including dotted-hex, dotted-octal, single decimal integer, single hex integer, or single octal integer, which is not captured by the blacklist filter.

Recommendations For Mozilla Firefox version 2.0, update the Phishing Protection mechanism to correctly handle different IP address formats or apply a configuration change to enhance the blacklist filter to include these formats.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2006-6971

Affected Products

Firefox

References · 4

• 🔥 http://sla.ckers.org/forum/read.php?13,2253 · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=356355 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6971 · Security Note
• http://sla.ckers.org/forum/read.php?13%2C2253 · Note