Lucene search
Mozilla FoundationMFSA2006-41HistoryJun 01, 2006 - 12:00 a.m.
File stealing by changing input type (variant) — Mozilla
2006-06-0100:00:00
Mozilla Foundation
www.mozilla.org
22
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.941
Percentile
99.2%
Chuck McAuley provided Proof-of-Concept code that demonstrates that MFSA 2006-23 was not fixed for all cases. In Firefox 1.5.0.2 it is still possible to pre-fill a text input control with the path to a file at a known location and then change the type of the input control to a file upload control without having the value reset as intended.
Affected configurations
Node
mozillafirefoxRange<1.5.0.4
ORmozillaseamonkeyRange<1.0.2
Related
nvd
nvd
CVE-2006-2782
2006-06-02 19:02:00
cve
cve
CVE-2006-2782
2006-06-02 19:02:00
prion
prion
Design/Logic Flaw
2006-06-02 19:02:00
ubuntucve
ubuntucve
CVE-2006-2782
2006-06-02 00:00:00
debiancve
debiancve
CVE-2006-2782
2006-06-02 19:02:00
cvelist
cvelist
CVE-2006-2782
2006-06-02 19:00:00
redhat
redhat
(RHSA-2006:0578) seamonkey security update (was mozilla)
2006-07-20 00:00:00
(RHSA-2006:0610) firefox security update
2006-07-28 00:00:00
(RHSA-2006:0611) thunderbird security update
2006-07-28 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2006-06-11 00:00:00
nessus
nessus
RHEL 3 : seamonkey (RHSA-2006:0578)
2006-07-21 00:00:00
GLSA-200606-12 : Mozilla Firefox: Multiple vulnerabilities
2006-06-16 00:00:00
SeaMonkey < 1.0.2 Multiple Vulnerabilities
2006-06-03 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200606-12 (mozilla-firefox)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-12 (mozilla-firefox)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200703-05 (mozilla)
2008-09-24 00:00:00
ubuntu
ubuntu
firefox vulnerabilities
2006-06-09 00:00:00
mozilla vulnerabilities
2006-07-26 00:00:00
Firefox vulnerabilities
2006-07-25 00:00:00
osv
osv
mozilla-firefox - several vulnerabilities
2006-07-23 00:00:00
mozilla - several
2006-07-22 00:00:00
mozilla-thunderbird - several vulnerabilities
2006-08-02 00:00:00
securityvulns
securityvulns
[USN-323-1] mozilla vulnerabilities
2006-07-27 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2006-06-23 08:11:46
debian
debian
oraclelinux
oraclelinux
Critical thunderbird security update
2006-12-07 00:00:00
Critical firefox security update
2006-12-07 00:00:00
centos
centos
thunderbird security update
2006-07-29 11:51:27
firefox security update
2006-07-29 11:51:13
devhelp, seamonkey security update
2006-08-05 15:16:05
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.941
Percentile
99.2%
Related for MFSA2006-41