NVD

Id
60698  
Name
CVE-2006-1993  
Description
Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller context object. NOTE: this was originally claimed to be a buffer overflow in (1) js320.dll and (2) xpcom_core.dll, but the vendor disputes this claim.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-25  
Modified Date
2011-03-07  
Seq
2006-1993  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313374 60698 CVE-2006-1993 oval:org.mitre.oval:def:1790  View
313375 60698 CVE-2006-1993 780  View
313376 60698 CVE-2006-1993 1015981  View
313377 60698 CVE-2006-1993 DSA-1053  View
313378 60698 CVE-2006-1993 DSA-1055  View
313379 60698 CVE-2006-1993 GLSA-200605-06  View
313380 60698 CVE-2006-1993 VU#866300  View
313381 60698 CVE-2006-1993 http://www.mozilla.org/security/announce/2006/mfsa2006-30.html  View
313382 60698 CVE-2006-1993 http://www.securident.com/vuln/ff.txt  View
313383 60698 CVE-2006-1993 20060424 Firefox Remote Code Execution and DoS 1.5.0.2  View
313384 60698 CVE-2006-1993 HPSBTU02118  View
313385 60698 CVE-2006-1993 HPSBUX02153  View
313386 60698 CVE-2006-1993 17671  View
313387 60698 CVE-2006-1993 ADV-2006-1614  View
313388 60698 CVE-2006-1993 ADV-2006-1922  View
313389 60698 CVE-2006-1993 ADV-2006-3748  View
313390 60698 CVE-2006-1993 ADV-2008-0083  View
313391 60698 CVE-2006-1993 firefox-iframe-contentwindowfocus-bo(25994)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58044 JVNDB-2006-000240 Mozilla Firefox における contentWindow.focus() 関数処理の不備により削除済みオブジェクトが参照可能な脆弱性 Mozilla Firefox には、designMode 属性が有効 (designMode = "on") となっている場合に iframe 要素における contentWindow.focus() メソッドの処理が不適切であるため、削除済みオブジェクトが参照されてしまう脆弱性が存在します。 CVE-2006-1993 18095 CVE-2006-1993 60698 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000240.html 2006-04-24 2007-04-01 View