CVE-2006-6503 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2006-6503
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-6503

Description: Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-400-1 http://www.ubuntu.com/usn/usn-398-2 http://www.ubuntu.com/usn/usn-398-1 SUSE http://www.novell.com/linux/security/advisories/2006_80_mozilla.html http://www.novell.com/linux/security/advisories/2007_06_mozilla.html ST 1017415 1017416 1017414 SGI SAID Secunia Advisory: SA23598 Secunia Advisory: SA23591 Secunia Advisory: SA23545 Secunia Advisory: SA23601 Secunia Advisory: SA23589 Secunia Advisory: SA23514 Secunia Advisory: SA23468 Secunia Advisory: SA23422 Secunia Advisory: SA23420 Secunia Advisory: SA23282 Secunia Advisory: SA23440 Secunia Advisory: SA23439 Secunia Advisory: SA23433 Secunia Advisory: SA23614 Secunia Advisory: SA23618 Secunia Advisory: SA23692 Secunia Advisory: SA23672 Secunia Advisory: SA23988 Secunia Advisory: SA24078 Secunia Advisory: SA24390 REDHAT http://rhn.redhat.com/errata/RHSA-2006-0760.html http://rhn.redhat.com/errata/RHSA-2006-0758.html http://rhn.redhat.com/errata/RHSA-2006-0759.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10895 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:011 http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml http://security.gentoo.org/glsa/glsa-200701-02.xml FEDORA http://fedoranews.org/cms/node/2338 http://fedoranews.org/cms/node/2297 DEBIAN http://www.debian.org/security/2007/dsa-1253 http://www.debian.org/security/2007/dsa-1265 http://www.debian.org/security/2007/dsa-1258 CONFIRM http://www.mozilla.org/security/announce/2006/mfsa2006-72.html CERT-VN 405092 CERT http://www.us-cert.gov/cas/techalerts/TA06-354A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/455145/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/455728/100/200/threaded BID 21668

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability