CVE-2006-1942

2006-04-2022:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-1942

firefox

netscape

k-meleon

remote attack

file opening issue

vulnerability

6.3 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an “alternate web page.”

CPENameOperatorVersion
netscape:navigatornetscape navigatoreq8.1
netscape:navigatornetscape navigatoreq8.0.40
netscape:navigatornetscape navigatoreq7.2
mozilla:firefoxmozilla firefoxeq1.5.0.2
k-meleon_project:k-meleonk-meleon project k-meleoneq0.9.13

CPE	Name	Operator	Version
netscape:navigator	netscape navigator	eq	8.1
netscape:navigator	netscape navigator	eq	8.0.40
netscape:navigator	netscape navigator	eq	7.2
mozilla:firefox	mozilla firefox	eq	1.5.0.2
k-meleon_project:k-meleon	k-meleon project k-meleon	eq	0.9.13