Lucene search

K
cve[email protected]CVE-2006-6991
HistoryFeb 09, 2007 - 1:28 a.m.

CVE-2006-6991

2007-02-0901:28:00
web.nvd.nist.gov
20
cve-2006-6991
cross-domain vulnerability
fast browser pro 8.1
remote attackers
restricted information
object tag
data parameter
nvd

5.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.935 High

EPSS

Percentile

99.1%

Cross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker’s originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.

Affected configurations

NVD
Node
fast_browserfast_browserMatchpro_8.1

5.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.935 High

EPSS

Percentile

99.1%