CVE

Id
16403  
CVE No.
CVE-2006-0299  
Status
Candidate  
Description
The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin restrictions.  
Phase
Assigned (20060118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
131289 16403 CVE-2006-0299 CONFIRM:http://www.mozilla.org/security/announce/2006/mfsa2006-08.html  View
131290 16403 CVE-2006-0299 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=322312  View
131291 16403 CVE-2006-0299 HP:HPSBUX02156  View
131292 16403 CVE-2006-0299 URL:http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded  View
131293 16403 CVE-2006-0299 HP:SSRT061236  View
131294 16403 CVE-2006-0299 URL:http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded  View
131295 16403 CVE-2006-0299 BID:16476  View
131296 16403 CVE-2006-0299 URL:http://www.securityfocus.com/bid/16476  View
131297 16403 CVE-2006-0299 VUPEN:ADV-2006-0413  View
131298 16403 CVE-2006-0299 URL:http://www.vupen.com/english/advisories/2006/0413  View
131299 16403 CVE-2006-0299 VUPEN:ADV-2006-3749  View
131300 16403 CVE-2006-0299 URL:http://www.vupen.com/english/advisories/2006/3749  View
131301 16403 CVE-2006-0299 OVAL:oval:org.mitre.oval:def:1625  View
131302 16403 CVE-2006-0299 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1625  View
131303 16403 CVE-2006-0299 SECTRACK:1015570  View
131304 16403 CVE-2006-0299 URL:http://securitytracker.com/id?1015570  View
131305 16403 CVE-2006-0299 SECUNIA:18700  View
131306 16403 CVE-2006-0299 URL:http://secunia.com/advisories/18700  View
131307 16403 CVE-2006-0299 SECUNIA:18704  View
131308 16403 CVE-2006-0299 URL:http://secunia.com/advisories/18704  View
131309 16403 CVE-2006-0299 SECUNIA:22065  View
131310 16403 CVE-2006-0299 URL:http://secunia.com/advisories/22065  View
131311 16403 CVE-2006-0299 XF:mozilla-e4x-security-bypass(24437)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57878 JVNDB-2006-000074 Xpdf の ラスタライズ処理におけるヒープオーバーフローの脆弱性 Xpdf に実装されている Splash.cc には、ラスタライズ処理に不備が存在するため、関連するビットマップの高さや幅の限度を超えた値を生成するスプラッシュイメージを処理する際に、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-0301 16403 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000074.html  View