CVE-2006-6507

MEDIO 4.3CVE-2006-6507 · Published 20/12/2006 · updated 16/06/2026

In breve

CVE-2006-6507 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda firefox (mozilla).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 77.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
firefox mozilla	`= 2.0`	No fix yet

Description

Mozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site Scripting (XSS) protection via vectors related to a Function.prototype regression error.

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
secunia.com/advisories/23282
secunia.com/advisories/23545 · Vendor Advisory
secunia.com/advisories/23589
secunia.com/advisories/23614 · Vendor Advisory
secunia.com/advisories/23672 · Vendor Advisory
security.gentoo.org/glsa/glsa-200701-02.xml
securitytracker.com/id
mozilla.org/security/announce/2006/mfsa2006-76.html
novell.com/linux/security/advisories/2006_80_mozilla.html
novell.com/linux/security/advisories/2007_06_mozilla.html
securityfocus.com/bid/21668
ubuntu.com/usn/usn-398-1
us-cert.gov/cas/techalerts/TA06-354A.html · US Government Resource
vupen.com/english/advisories/2006/5068
vupen.com/english/advisories/2008/0083

Altre vulnerabilità di firefox

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free