CVE

Id
23023  
CVE No.
CVE-2006-6919  
Status
Candidate  
Description
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing ">", which Sage modifies to close the img element before the malicious script.  
Phase
Assigned (20070111)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222310 23023 CVE-2006-6919 BUGTRAQ:20061118 Sage cross-context scripting -> LOCAL-CONTEXT SCRIPTING  View
222311 23023 CVE-2006-6919 URL:http://www.securityfocus.com/archive/1/archive/1/452010/100/0/threaded  View
222312 23023 CVE-2006-6919 MISC:http://michaeldaw.org/md-hacks/rss-injection-in-sage-part-2/  View
222313 23023 CVE-2006-6919 VUPEN:ADV-2006-4426  View
222314 23023 CVE-2006-6919 URL:http://www.vupen.com/english/advisories/2006/4426  View
222315 23023 CVE-2006-6919 SECUNIA:22809  View
222316 23023 CVE-2006-6919 URL:http://secunia.com/advisories/22809  View
222317 23023 CVE-2006-6919 XF:sage-img-xss(30179)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52130 JVNDB-2007-000793 Linux Kernel のゾンビプロセスの取り扱いに関するサービス運用妨害 (DoS) の脆弱性 Linux Kernel には、親プロセスが終了している際に、待機状態の子プロセスを扱う init 処理を妨害してしまうために、ゾンビプロセスが大量に生成され、結果的にサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2006-6921 23023 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000793.html  View