Lucene search
HistoryDec 03, 2006 - 7:28 p.m.
CVE-2006-6238
apple safari
autofill
cve-2006-6238
information security
remote attackers
sensitive information
5.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.6%
The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:safari | apple safari | eq | 2.0.4 |
Related
cvelist
cvelist
CVE-2006-6238
2022-10-03 16:21:22
CVE-2006-6077
2006-11-24 17:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:12:48
cve
cve
CVE-2006-6077
2006-11-24 17:07:00
ubuntucve
ubuntucve
CVE-2006-6077
2006-11-24 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-02
2007-02-27 00:00:00
mozilla
mozilla
Improvements to help protect against Cross-Site Scripting attacks — Mozilla
2007-02-23 00:00:00
openvas
openvas
Fedora Update for firefox FEDORA-2007-293
2009-02-27 00:00:00
Fedora Update for firefox FEDORA-2007-281
2009-02-27 00:00:00
Gentoo Security Advisory GLSA 200703-04 (mozilla-firefox)
2008-09-24 00:00:00
osv
osv
mozilla-firefox
2007-07-22 00:00:00
nessus
nessus
GLSA-200703-04 : Mozilla Firefox: Multiple vulnerabilities
2007-03-06 00:00:00
Debian DSA-1336-1 : mozilla-firefox - several vulnerabilities
2007-07-27 00:00:00
GLSA-200703-08 : SeaMonkey: Multiple vulnerabilities
2007-03-12 00:00:00
debian
debian
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2007-03-02 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-03-09 00:00:00
redhat
redhat
(RHSA-2007:0097) Critical: firefox security update
2007-03-14 00:00:00
(RHSA-2007:0108) Critical: thunderbird security update
2007-03-13 00:00:00
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
centos
centos
firefox security update
2007-02-24 13:53:25
thunderbird security update
2007-03-04 11:06:21
devhelp, seamonkey security update
2007-02-24 14:49:37
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: Firefox security update
2007-02-24 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2007-03-01 00:00:00
Firefox regression
2007-03-02 00:00:00
suse
suse
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
5.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.6%
Related for CVE-2006-6238