CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
99.9%
Various flaws have been reported that allow an attacker to execute
arbitrary code with user privileges by tricking the user into opening
a malicious URL. (CVE-2006-3113, CVE-2006-3677, CVE-2006-3801,
CVE-2006-3803, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807,
CVE-2006-3809, CVE-2006-3811, CVE-2006-3812)
cross-site scripting vulnerabilities were found in the
XPCNativeWrapper() function and native DOM method handlers. A
malicious web site could exploit these to modify the contents or steal
confidential data (such as passwords) from other opened web pages.
(CVE-2006-3802, CVE-2006-3810)
A bug was found in the script handler for automatic proxy
configuration. A malicious proxy could send scripts which could
execute arbitrary code with the user’s privileges. (CVE-2006-3808)
Please see
<http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox>
for technical details of these vulnerabilities.
ubuntu.com/security/CVE-2006-3113
ubuntu.com/security/CVE-2006-3677
ubuntu.com/security/CVE-2006-3801
ubuntu.com/security/CVE-2006-3802
ubuntu.com/security/CVE-2006-3803
ubuntu.com/security/CVE-2006-3805
ubuntu.com/security/CVE-2006-3806
ubuntu.com/security/CVE-2006-3807
ubuntu.com/security/CVE-2006-3808
ubuntu.com/security/CVE-2006-3809
ubuntu.com/security/CVE-2006-3810
ubuntu.com/security/CVE-2006-3811
ubuntu.com/security/CVE-2006-3812