CVE-2006-2784

2006-06-0200:00:00

ubuntu.com

0.198 Low

EPSS

Percentile

96.3%

JSON

The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows
remote user-assisted attackers to execute privileged code by tricking a
user into installing missing plugins and selecting the “Manual Install”
button, then using nested javascript: URLs. NOTE: the manual install
button is used for downloading software from a remote web site, so this
issue would not cross privilege boundaries if the user progresses to the
point of installing malicious software from the attacker-controlled site.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1UNKNOWN
ubuntu6.10noarchxulrunner< 1.8.0.5-4.2UNKNOWN
ubuntu7.04noarchxulrunner< 1.8.0.5-4.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1	UNKNOWN
ubuntu	6.10	noarch	xulrunner	< 1.8.0.5-4.2	UNKNOWN
ubuntu	7.04	noarch	xulrunner	< 1.8.0.5-4.2	UNKNOWN