CVE-2006-1725

Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code.

CVSS v2.0 2.6 LOW

2.6^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/19631	Third Party Advisory
http://secunia.com/advisories/19649	Third Party Advisory Vendor Advisory
http://secunia.com/advisories/22066	Third Party Advisory
http://www.mozilla.org/security/announce/2006/mfsa2006-29.html	Vendor Advisory
http://www.securityfocus.com/archive/1/446658/100/200/threaded
http://www.securityfocus.com/bid/17516	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2006/1356	Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2006/3748	Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2008/0083	Permissions Required Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=327014	Exploit Issue Tracking Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25827	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:firefox::::::::
	cpe:2.3:a:mozilla:seamonkey::::::::

History

No history.

Information

Published : 2006-04-14 10:02

Updated : 2023-12-10 10:28

NVD link : CVE-2006-1725

Mitre link : CVE-2006-1725

CVE.ORG link : CVE-2006-1725

JSON object : View

Products Affected

mozilla

seamonkey
firefox

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2006-1725", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2006-04-14T10:02:00.000", "references": [{"url": "http://secunia.com/advisories/19631", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/19649", "tags": ["Third Party Advisory", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/22066", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.mozilla.org/security/announce/2006/mfsa2006-29.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/archive/1/446658/100/200/threaded", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/17516", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2006/1356", "tags": ["Permissions Required", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2006/3748", "tags": ["Permissions Required", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2008/0083", "tags": ["Permissions Required", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=327014", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25827", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code."}], "lastModified": "2018-10-18T16:34:11.890", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04455349-5186-4BF4-8EE1-F4852B806F47", "versionEndExcluding": "1.5.0.2", "versionStartIncluding": "1.5"}, {"criteria": "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "976B9AFA-0129-480B-B226-892CECD59287", "versionEndExcluding": "1.0.1"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com", "evaluatorSolution": "Fixed in: \r\n Firefox 1.5.0.2\r\n SeaMonkey 1.0.1"}