Lucene search
Mozilla FoundationMFSA2006-05HistoryFeb 01, 2006 - 12:00 a.m.
Localstore.rdf XML injection through XULDocument.persist() — Mozilla
2006-02-0100:00:00
Mozilla Foundation
www.mozilla.org
13
0.958 High
EPSS
Percentile
99.4%
XULDocument.persist() did not validate the attribute name, allowing an attacker to inject XML into localstore.rdf that would be read and acted upon at startup. This could include JavaScript commands that would be run with the permissions of the browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 1.0.8 | |
| firefox | lt | 1.5.0.1 | |
| mozilla suite | lt | 1.7.13 | |
| seamonkey | lt | 1 | |
| thunderbird | lt | 1.0.8 | |
| thunderbird | lt | 1.5.0.2 |
Related
cve
cve
CVE-2006-0296
2006-02-02 20:06:00
prion
prion
Design/Logic Flaw
2006-02-02 20:06:00
cvelist
cvelist
CVE-2006-0296
2006-02-02 20:00:00
ubuntucve
ubuntucve
CVE-2006-0296
2006-02-02 00:00:00
debiancve
debiancve
CVE-2006-0296
2006-02-02 20:06:00
cert
cert
securityvulns
securityvulns
nessus
nessus
Fedora Core 4 : mozilla-1.7.12-1.5.2 (2006-075)
2006-02-05 00:00:00
Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2006:037)
2006-02-10 00:00:00
CentOS 3 / 4 : mozilla (CESA-2006:0199)
2006-07-03 00:00:00
centos
centos
mozilla security update
2006-02-03 00:37:23
mozilla security update
2006-02-02 18:17:59
firefox security update
2006-02-02 19:37:08
redhat
redhat
(RHSA-2006:0200) firefox security update
2006-02-02 00:00:00
(RHSA-2006:0199) mozilla security update
2006-02-02 00:00:00
(RHSA-2006:0330) thunderbird security update
2006-04-21 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2006-05-03 00:00:00
Firefox vulnerabilities
2006-04-20 00:00:00
Mozilla vulnerabilities
2006-04-28 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200604-12 (mozilla-firefox)
2008-09-24 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2006-05-08 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2006-04-23 00:00:00
Mozilla Suite: Multiple vulnerabilities
2006-04-28 00:00:00
debian
debian
osv
osv
mozilla-firefox - several
2006-04-26 00:00:00
mozilla-thunderbird - several vulnerabilities
2006-05-04 00:00:00
mozilla - several
2006-04-27 00:00:00
suse
suse
remote code execution in MozillaThunderbird
2006-04-25 13:15:04
remote code execution in phpMyAdmin
2006-01-26 13:53:52