CVE-2006-6507 - Mozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site Scripting (XSS) prot

CVE-2006-6507

Summary

Mozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site Scripting (XSS) protection via vectors related to a Function.prototype regression error.

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
http://secunia.com/advisories/23282
http://secunia.com/advisories/23545
http://secunia.com/advisories/23589
http://secunia.com/advisories/23614
http://secunia.com/advisories/23672
http://security.gentoo.org/glsa/glsa-200701-02.xml
http://securitytracker.com/id?1017422
http://www.mozilla.org/security/announce/2006/mfsa2006-76.html
http://www.novell.com/linux/security/advisories/2006_80_mozilla.html
http://www.novell.com/linux/security/advisories/2007_06_mozilla.html
http://www.securityfocus.com/bid/21668
http://www.ubuntu.com/usn/usn-398-1
http://www.us-cert.gov/cas/techalerts/TA06-354A.html
http://www.vupen.com/english/advisories/2006/5068
http://www.vupen.com/english/advisories/2008/0083

Vulnerable Configurations

cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 08-03-2011 - 02:46)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	21668
cert	TA06-354A
confirm	http://www.mozilla.org/security/announce/2006/mfsa2006-76.html
gentoo	GLSA-200701-02
hp	HPSBUX02153 SSRT061181
sectrack	1017422
secunia	23282 23545 23589 23614 23672
suse	SUSE-SA:2006:080 SUSE-SA:2007:006
ubuntu	USN-398-1
vupen	ADV-2006-5068 ADV-2008-0083

Last major update

08-03-2011 - 02:46

Published

20-12-2006 - 01:28

Last modified

08-03-2011 - 02:46