NVD

Id
59039  
Name
CVE-2006-0299  
Description
The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-02  
Modified Date
2011-03-07  
Seq
2006-0299  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
303389 59039 CVE-2006-0299 oval:org.mitre.oval:def:1625  View
303390 59039 CVE-2006-0299 1015570  View
303391 59039 CVE-2006-0299 http://www.mozilla.org/security/announce/2006/mfsa2006-08.html  View
303392 59039 CVE-2006-0299 SSRT061236  View
303393 59039 CVE-2006-0299 16476  View
303394 59039 CVE-2006-0299 ADV-2006-0413  View
303395 59039 CVE-2006-0299 ADV-2006-3749  View
303396 59039 CVE-2006-0299 mozilla-e4x-security-bypass(24437)  View
303397 59039 CVE-2006-0299 https://bugzilla.mozilla.org/show_bug.cgi?id=322312  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57889 JVNDB-2006-000085 Mozilla 製品における同一生成元制限によるアクセス制限を回避される脆弱性 ------------ CVE-2006-0299 16401 CVE-2006-0299 59039 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000085.html 2006-02-02 2007-04-01 View