Lucene search
MitreCVE-2006-6238HistoryDec 03, 2006 - 7:28 p.m.
CVE-2006-6238
2006-12-0319:28:00
mitre
web.nvd.nist.gov
32
apple safari
autofill
cve-2006-6238
information security
remote attackers
sensitive information
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0.134
Percentile
95.7%
The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077.
Affected configurations
Node
applesafariMatch2.0.4
Related
nvd
nvd
CVE-2006-6238
2006-12-03 19:28:00
CVE-2006-6077
2006-11-24 17:07:00
cvelist
cvelist
CVE-2006-6238
2006-12-03 18:00:00
CVE-2006-6077
2006-11-24 17:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:12:48
ubuntucve
ubuntucve
CVE-2006-6077
2006-11-24 00:00:00
cve
cve
CVE-2006-6077
2006-11-24 17:07:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-02
2007-02-27 00:00:00
mozilla
mozilla
Improvements to help protect against Cross-Site Scripting attacks — Mozilla
2007-02-23 00:00:00
openvas
openvas
Fedora Update for firefox FEDORA-2007-293
2009-02-27 00:00:00
Fedora Update for firefox FEDORA-2007-281
2009-02-27 00:00:00
Gentoo Security Advisory GLSA 200703-04 (mozilla-firefox)
2008-09-24 00:00:00
osv
osv
mozilla-firefox
2007-07-22 00:00:00
nessus
nessus
GLSA-200703-08 : SeaMonkey: Multiple vulnerabilities
2007-03-12 00:00:00
GLSA-200703-04 : Mozilla Firefox: Multiple vulnerabilities
2007-03-06 00:00:00
Debian DSA-1336-1 : mozilla-firefox - several vulnerabilities
2007-07-27 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2007-03-02 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-03-09 00:00:00
debian
debian
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
redhat
redhat
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
(RHSA-2007:0097) Critical: firefox security update
2007-03-14 00:00:00
(RHSA-2007:0108) Critical: thunderbird security update
2007-03-13 00:00:00
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: Firefox security update
2007-02-24 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2007-03-01 00:00:00
Firefox regression
2007-03-02 00:00:00
centos
centos
thunderbird security update
2007-03-04 11:06:21
seamonkey security update
2007-03-16 07:21:16
firefox security update
2007-02-24 13:53:25
suse
suse
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0.134
Percentile
95.7%
Related for CVE-2006-6238