Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-2775
HistoryJun 02, 2006 - 6:02 p.m.

CVE-2006-2775

2006-06-0218:02:00
CWE-264
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.215 Low

EPSS

Percentile

96.5%

JSON

Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL.

Affected configurations

NVD
Node
mozillafirefoxRange≤1.5.0.3
OR
mozillafirefoxMatch0.8
OR
mozillafirefoxMatch0.9
OR
mozillafirefoxMatch0.9rc
OR
mozillafirefoxMatch0.9.1
OR
mozillafirefoxMatch0.9.2
OR
mozillafirefoxMatch0.9.3
OR
mozillafirefoxMatch0.10
OR
mozillafirefoxMatch0.10.1
OR
mozillafirefoxMatch1.0
OR
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillafirefoxMatch1.0.3
OR
mozillafirefoxMatch1.0.4
OR
mozillafirefoxMatch1.0.5
OR
mozillafirefoxMatch1.0.6
OR
mozillafirefoxMatch1.0.6linux
OR
mozillafirefoxMatch1.0.7
OR
mozillafirefoxMatch1.5
OR
mozillafirefoxMatch1.5beta1
OR
mozillafirefoxMatch1.5beta2
OR
mozillafirefoxMatch1.5.0.1
OR
mozillafirefoxMatch1.5.0.2
OR
mozillathunderbirdRange≤1.5.0.1
OR
mozillathunderbirdMatch0.1
OR
mozillathunderbirdMatch0.2
OR
mozillathunderbirdMatch0.3
OR
mozillathunderbirdMatch0.4
OR
mozillathunderbirdMatch0.5
OR
mozillathunderbirdMatch0.6
OR
mozillathunderbirdMatch0.7
OR
mozillathunderbirdMatch0.7.1
OR
mozillathunderbirdMatch0.7.2
OR
mozillathunderbirdMatch0.7.3
OR
mozillathunderbirdMatch0.8
OR
mozillathunderbirdMatch0.9
OR
mozillathunderbirdMatch1.0
OR
mozillathunderbirdMatch1.0.1
OR
mozillathunderbirdMatch1.0.2
OR
mozillathunderbirdMatch1.0.3
OR
mozillathunderbirdMatch1.0.4
OR
mozillathunderbirdMatch1.0.5
OR
mozillathunderbirdMatch1.0.5beta
OR
mozillathunderbirdMatch1.0.6
OR
mozillathunderbirdMatch1.0.7
OR
mozillathunderbirdMatch1.5
OR
mozillathunderbirdMatch1.5beta2

References

Related

debiancve 1
cvelist 1
ubuntucve 1
cert 1
cve 1
prion 1
mozilla 1
nessus 17
gentoo 2
openvas 19
ubuntu 5
securityvulns 2
suse 1
debian 3
osv 3
debiancve
debiancve
CVE-2006-2775
2006-06-02 18:02:00
cvelist
cvelist
CVE-2006-2775
2006-06-02 18:00:00
ubuntucve
ubuntucve
CVE-2006-2775
2006-06-02 00:00:00
cert
cert
Mozilla may associate persisted XUL attributes with an incorrect URL
2006-06-02 00:00:00
cve
cve
CVE-2006-2775
2006-06-02 18:02:00
prion
prion
Design/Logic Flaw
2006-06-02 18:02:00
mozilla
mozilla
Privilege escalation through XUL persist. — Mozilla
2006-06-01 00:00:00
nessus
nessus
Ubuntu 6.06 LTS : mozilla-thunderbird vulnerabilities (USN-297-1)
2007-11-10 00:00:00
GLSA-200606-21 : Mozilla Thunderbird: Multiple vulnerabilities
2006-06-20 00:00:00
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-1672)
2007-10-17 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2006-06-19 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2006-06-11 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)
2008-09-24 00:00:00
Ubuntu: Security Advisory (USN-297-1)
2022-08-26 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2006-06-14 00:00:00
Thunderbird vulnerabilities
2006-07-26 00:00:00
firefox vulnerabilities
2006-06-09 00:00:00
securityvulns
securityvulns
[USN-297-3] Thunderbird vulnerabilities
2006-07-27 00:00:00
[USN-323-1] mozilla vulnerabilities
2006-07-27 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2006-06-23 08:11:46
debian
debian
[SECURITY] [DSA 1120-1] New Mozilla Firefox packages fix several vulnerabilities
2006-07-23 06:47:55
[SECURITY] [DSA 1118-1] New Mozilla packages fix several vulnerabilities
2006-07-22 13:23:33
[SECURITY] [DSA 1134-1] New Mozilla Thunderbird packages fix several vulnerabilities
2006-08-02 05:47:19
osv
osv
mozilla-firefox - several vulnerabilities
2006-07-23 00:00:00
mozilla - several
2006-07-22 00:00:00
mozilla-thunderbird - several vulnerabilities
2006-08-02 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.215 Low

EPSS

Percentile

96.5%

JSON
Related for NVD:CVE-2006-2775
debiancve1cvelist1ubuntucve1cert1cve1prion1mozilla1nessus17gentoo2openvas19ubuntu5securityvulns2suse1debian3osv3