[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-1741Date: (C)2006-04-14   (M)2024-03-27


Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) "using a modal alert to suspend an event handler while a new page is being loaded", (2) using eval(), and using certain variants involving (3) "new Script;" and (4) using window.__proto__ to extend eval, aka "cross-site JavaScript injection".

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
SUNALERT-102550
SECUNIA-19631
SECUNIA-19696
SECUNIA-19714
SECUNIA-19721
SECUNIA-19729
SECUNIA-19746
SECUNIA-19759
SECUNIA-19780
SECUNIA-19811
SECUNIA-19821
SECUNIA-19823
SECUNIA-19852
SECUNIA-19862
SECUNIA-19863
SECUNIA-19902
SECUNIA-19941
SECUNIA-19950
SECUNIA-20051
20060404-01-U
SECUNIA-21033
SECUNIA-21622
SUNALERT-228526
ADV-2006-1356
DSA-1044
DSA-1046
DSA-1051
FEDORA-2006-410
FEDORA-2006-411
FLSA:189137-1
FLSA:189137-2
GLSA-200604-12
GLSA-200604-18
GLSA-200605-09
HPSBUX02122
MDKSA-2006:076
MDKSA-2006:078
RHSA-2006:0328
RHSA-2006:0329
RHSA-2006:0330
SCOSA-2006.26
SUSE-SA:2006:021
SUSE-SA:2006:022
USN-271-1
USN-275-1
USN-276-1
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
http://www.mozilla.org/security/announce/2006/mfsa2006-09.html
mozilla-eventhandler-xss(25806)
oval:org.mitre.oval:def:1855
oval:org.mitre.oval:def:9167

CPE    7
cpe:/o:canonical:ubuntu_linux:5.10
cpe:/o:canonical:ubuntu_linux:4.10
cpe:/o:canonical:ubuntu_linux:5.04
cpe:/a:mozilla:seamonkey
...
CWE    1
CWE-79
OVAL    1
oval:org.mitre.oval:def:1855

© SecPod Technologies