NVD

Id
59036  
Name
CVE-2006-0296  
Description
The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user"s localstore.rdf file.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-02  
Modified Date
2011-03-07  
Seq
2006-0296  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
303332 59036 CVE-2006-0296 SCOSA-2006.26  View
303333 59036 CVE-2006-0296 20060201-01-U  View
303334 59036 CVE-2006-0296 oval:org.mitre.oval:def:11803  View
303335 59036 CVE-2006-0296 oval:org.mitre.oval:def:1493  View
303336 59036 CVE-2006-0296 1015570  View
303337 59036 CVE-2006-0296 102550  View
303338 59036 CVE-2006-0296 228526  View
303339 59036 CVE-2006-0296 http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm  View
303340 59036 CVE-2006-0296 DSA-1044  View
303341 59036 CVE-2006-0296 DSA-1046  View
303342 59036 CVE-2006-0296 DSA-1051  View
303343 59036 CVE-2006-0296 GLSA-200604-12  View
303344 59036 CVE-2006-0296 GLSA-200604-18  View
303345 59036 CVE-2006-0296 GLSA-200605-09  View
303346 59036 CVE-2006-0296 VU#592425  View
303347 59036 CVE-2006-0296 MDKSA-2006:036  View
303348 59036 CVE-2006-0296 MDKSA-2006:037  View
303349 59036 CVE-2006-0296 MDKSA-2006:078  View
303350 59036 CVE-2006-0296 http://www.mozilla.org/security/announce/2006/mfsa2006-05.html  View
303351 59036 CVE-2006-0296 SUSE-SA:2006:004  View
303352 59036 CVE-2006-0296 FEDORA-2006-075  View
303353 59036 CVE-2006-0296 FEDORA-2006-076  View
303354 59036 CVE-2006-0296 RHSA-2006:0199  View
303355 59036 CVE-2006-0296 RHSA-2006:0200  View
303356 59036 CVE-2006-0296 RHSA-2006:0330  View
303357 59036 CVE-2006-0296 FLSA:180036-1  View
303358 59036 CVE-2006-0296 FLSA-2006:180036-2  View
303359 59036 CVE-2006-0296 SSRT061158  View
303360 59036 CVE-2006-0296 SSRT061236  View
303361 59036 CVE-2006-0296 16476  View
303362 59036 CVE-2006-0296 USN-271-1  View
303363 59036 CVE-2006-0296 USN-275-1  View
303364 59036 CVE-2006-0296 USN-276-1  View
303365 59036 CVE-2006-0296 TA06-038A  View
303366 59036 CVE-2006-0296 ADV-2006-0413  View
303367 59036 CVE-2006-0296 ADV-2006-3391  View
303368 59036 CVE-2006-0296 ADV-2006-3749  View
303369 59036 CVE-2006-0296 mozilla-xuldocument-command-execution(24434)  View
303370 59036 CVE-2006-0296 https://bugzilla.mozilla.org/show_bug.cgi?id=319847  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57886 JVNDB-2006-000082 Mozilla 製品の XULDocument.persist() 関数における任意のスクリプトを実行される脆弱性 ------------ CVE-2006-0296 16398 CVE-2006-0296 59036 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000082.html 2006-02-02 2007-04-01 View