NVD

Id
60647  
Name
CVE-2006-1942  
Description
Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-20  
Modified Date
2011-03-07  
Seq
2006-1942  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313066 60647 CVE-2006-1942 1016202  View
313067 60647 CVE-2006-1942 DSA-1118  View
313068 60647 CVE-2006-1942 DSA-1120  View
313069 60647 CVE-2006-1942 DSA-1134  View
313070 60647 CVE-2006-1942 http://www.gavinsharp.com/tmp/ImageVuln.html  View
313071 60647 CVE-2006-1942 http://www.mozilla.org/security/announce/2006/mfsa2006-39.html  View
313072 60647 CVE-2006-1942 http://www.networksecurity.fi/advisories/netscape-view-image.html  View
313073 60647 CVE-2006-1942 SUSE-SA:2006:035  View
313074 60647 CVE-2006-1942 20060418 Another flaw in Firefox 1.5.0.2: to open files from remote  View
313075 60647 CVE-2006-1942 20060505 Firefox 1.5.0.3 code execution exploit  View
313076 60647 CVE-2006-1942 20060507 Re: Firefox 1.5.0.3 code execution exploit  View
313077 60647 CVE-2006-1942 20060602 rPSA-2006-0091-1 firefox thunderbird  View
313078 60647 CVE-2006-1942 HPSBUX02153  View
313079 60647 CVE-2006-1942 18228  View
313080 60647 CVE-2006-1942 ADV-2006-2106  View
313081 60647 CVE-2006-1942 ADV-2006-3748  View
313082 60647 CVE-2006-1942 ADV-2008-0083  View
313083 60647 CVE-2006-1942 firefox-viewimage-security-bypass(25925)  View
313084 60647 CVE-2006-1942 https://bugzilla.mozilla.org/show_bug.cgi?id=334341  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58117 JVNDB-2006-000313 Mozilla 製品におけるローカルファイルへのリンク制限を回避される脆弱性 Mozilla Firefox には、IMG タグの SRC 属性に Windows のファイル名構文を用いることで、ローカルファイルへのリンクの制限を回避してしまう脆弱性が存在します。 CVE-2006-1942 18044 CVE-2006-1942 60647 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000313.html 2006-06-01 2007-04-01 View