CVE-2006-2784

2006-06-0200:00:00

ubuntu.com

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.198

Percentile

96.3%

JSON

The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows
remote user-assisted attackers to execute privileged code by tricking a
user into installing missing plugins and selecting the “Manual Install”
button, then using nested javascript: URLs. NOTE: the manual install
button is used for downloading software from a remote web site, so this
issue would not cross privilege boundaries if the user progresses to the
point of installing malicious software from the attacker-controlled site.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1UNKNOWN
ubuntu6.10noarchxulrunner< 1.8.0.5-4.2UNKNOWN
ubuntu7.04noarchxulrunner< 1.8.0.5-4.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1	UNKNOWN
ubuntu	6.10	noarch	xulrunner	< 1.8.0.5-4.2	UNKNOWN
ubuntu	7.04	noarch	xulrunner	< 1.8.0.5-4.2	UNKNOWN