CVE-2006-1942

2006-04-2022:02:00

mitre

web.nvd.nist.gov

cve-2006-1942

firefox

netscape

k-meleon

remote attack

file opening issue

vulnerability

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0.01

Percentile

83.6%

JSON

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an “alternate web page.”

Affected configurations

Nvd

Node

k-meleon_projectk-meleonMatch0.9.13

mozillafirefoxMatch1.5.0.2

netscapenavigatorMatch7.2

netscapenavigatorMatch8.0.40

netscapenavigatorMatch8.1

VendorProductVersionCPE
k-meleon_projectk-meleon0.9.13cpe:2.3:a:k-meleon_project:k-meleon:0.9.13:*:*:*:*:*:*:*
mozillafirefox1.5.0.2cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*
netscapenavigator7.2cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*
netscapenavigator8.0.40cpe:2.3:a:netscape:navigator:8.0.40:*:*:*:*:*:*:*
netscapenavigator8.1cpe:2.3:a:netscape:navigator:8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
k-meleon_project	k-meleon	0.9.13	cpe:2.3:a:k-meleon_project:k-meleon:0.9.13:::::::*
mozilla	firefox	1.5.0.2	cpe:2.3:a:mozilla:firefox:1.5.0.2:::::::*
netscape	navigator	7.2	cpe:2.3:a:netscape:navigator:7.2:::::::*
netscape	navigator	8.0.40	cpe:2.3:a:netscape:navigator:8.0.40:::::::*
netscape	navigator	8.1	cpe:2.3:a:netscape:navigator:8.1:::::::*