NVD

Id
60441  
Name
CVE-2006-1736  
Description
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-04-14  
Modified Date
2011-03-07  
Seq
2006-1736  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
311619 60441 CVE-2006-1736 SCOSA-2006.26  View
311620 60441 CVE-2006-1736 SUSE-SA:2006:021  View
311621 60441 CVE-2006-1736 oval:org.mitre.oval:def:1548  View
311622 60441 CVE-2006-1736 102550  View
311623 60441 CVE-2006-1736 228526  View
311624 60441 CVE-2006-1736 http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm  View
311625 60441 CVE-2006-1736 DSA-1044  View
311626 60441 CVE-2006-1736 DSA-1046  View
311627 60441 CVE-2006-1736 DSA-1051  View
311628 60441 CVE-2006-1736 GLSA-200604-12  View
311629 60441 CVE-2006-1736 GLSA-200604-18  View
311630 60441 CVE-2006-1736 MDKSA-2006:075  View
311631 60441 CVE-2006-1736 MDKSA-2006:076  View
311632 60441 CVE-2006-1736 http://www.mozilla.org/security/announce/2006/mfsa2006-13.html  View
311633 60441 CVE-2006-1736 SSRT061158  View
311634 60441 CVE-2006-1736 17516  View
311635 60441 CVE-2006-1736 USN-271-1  View
311636 60441 CVE-2006-1736 USN-275-1  View
311637 60441 CVE-2006-1736 ADV-2006-1356  View
311638 60441 CVE-2006-1736 mozilla-saveimageas-ext-spoofing(25814)  View
311639 60441 CVE-2006-1736 https://bugzilla.mozilla.org/show_bug.cgi?id=293527  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58001 JVNDB-2006-000197 Mozilla Firefox における偽装された実行ファイルを画像ファイルとして保存する脆弱性 Mozilla Firefox には、 Web ページに表示されている画像に対するチェックが適切に行われない不備が存在し、画像データではないファイルに対しても、コンテキストメニューから「名前を付けて画像を保存」を選択可能である脆弱性が存在します。 CVE-2006-1736 17838 CVE-2006-1736 60441 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000197.html 2006-04-11 2007-04-01 View