NVD

Id
59613  
Name
CVE-2006-0884  
Description
The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-02-24  
Modified Date
2011-05-25  
Seq
2006-0884  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
306621 59613 CVE-2006-0884 SCOSA-2006.26  View
306622 59613 CVE-2006-0884 20060404-01-U  View
306623 59613 CVE-2006-0884 SUSE-SA:2006:021  View
306624 59613 CVE-2006-0884 oval:org.mitre.oval:def:10782  View
306625 59613 CVE-2006-0884 oval:org.mitre.oval:def:2024  View
306626 59613 CVE-2006-0884 1015665  View
306627 59613 CVE-2006-0884 102550  View
306628 59613 CVE-2006-0884 228526  View
306629 59613 CVE-2006-0884 http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm  View
306630 59613 CVE-2006-0884 DSA-1046  View
306631 59613 CVE-2006-0884 DSA-1051  View
306632 59613 CVE-2006-0884 GLSA-200604-18  View
306633 59613 CVE-2006-0884 GLSA-200605-09  View
306634 59613 CVE-2006-0884 MDKSA-2006:052  View
306635 59613 CVE-2006-0884 MDKSA-2006:076  View
306636 59613 CVE-2006-0884 MDKSA-2006:078  View
306637 59613 CVE-2006-0884 http://www.mozilla.org/security/announce/2006/mfsa2006-21.html  View
306638 59613 CVE-2006-0884 SUSE-SA:2006:004  View
306639 59613 CVE-2006-0884 RHSA-2006:0329  View
306640 59613 CVE-2006-0884 RHSA-2006:0330  View
306641 59613 CVE-2006-0884 20060222 Mozilla Thunderbird : Remote Code Execution & Denial of Service  View
306642 59613 CVE-2006-0884 FLSA:189137-1  View
306643 59613 CVE-2006-0884 SSRT061158  View
306644 59613 CVE-2006-0884 SSRT061236  View
306645 59613 CVE-2006-0884 16770  View
306646 59613 CVE-2006-0884 USN-276-1  View
306647 59613 CVE-2006-0884 ADV-2006-3749  View
306648 59613 CVE-2006-0884 mozilla-inline-fwd-code-execution(25983)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58030 JVNDB-2006-000226 Mozilla 製品におけるエディタ上で JavaScript コードを実行される脆弱性 Mozilla Suite、Thunderbird には、標準の HTML 形式の「リッチメール」エディタが使用するレンダリングエンジンにおいて、iframe タグの src 属性に含まれる JavaScript コードのフィルタリングが不適切であるため、メールをインラインで転送した場合に、エディタ上で JavaScript コードが実行される脆弱性が存在します。 CVE-2006-0884 16986 CVE-2006-0884 59613 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000226.html 2006-04-21 2007-04-01 View