NVD

Id
61461  
Name
CVE-2006-2776  
Description
Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-02  
Modified Date
2011-03-07  
Seq
2006-2776  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317638 61461 CVE-2006-2776 oval:org.mitre.oval:def:9849  View
317639 61461 CVE-2006-2776 RHSA-2006:0609  View
317640 61461 CVE-2006-2776 1016202  View
317641 61461 CVE-2006-2776 1016214  View
317642 61461 CVE-2006-2776 102800  View
317643 61461 CVE-2006-2776 DSA-1118  View
317644 61461 CVE-2006-2776 DSA-1120  View
317645 61461 CVE-2006-2776 DSA-1134  View
317646 61461 CVE-2006-2776 GLSA-200606-12  View
317647 61461 CVE-2006-2776 GLSA-200606-21  View
317648 61461 CVE-2006-2776 VU#575969  View
317649 61461 CVE-2006-2776 MDKSA-2006:143  View
317650 61461 CVE-2006-2776 MDKSA-2006:145  View
317651 61461 CVE-2006-2776 MDKSA-2006:146  View
317652 61461 CVE-2006-2776 http://www.mozilla.org/security/announce/2006/mfsa2006-37.html  View
317653 61461 CVE-2006-2776 SUSE-SA:2006:035  View
317654 61461 CVE-2006-2776 RHSA-2006:0578  View
317655 61461 CVE-2006-2776 RHSA-2006:0594  View
317656 61461 CVE-2006-2776 RHSA-2006:0610  View
317657 61461 CVE-2006-2776 RHSA-2006:0611  View
317658 61461 CVE-2006-2776 20060602 rPSA-2006-0091-1 firefox thunderbird  View
317659 61461 CVE-2006-2776 HPSBUX02156  View
317660 61461 CVE-2006-2776 SSRT061181  View
317661 61461 CVE-2006-2776 18228  View
317662 61461 CVE-2006-2776 USN-296-1  View
317663 61461 CVE-2006-2776 USN-296-2  View
317664 61461 CVE-2006-2776 USN-297-1  View
317665 61461 CVE-2006-2776 USN-297-3  View
317666 61461 CVE-2006-2776 USN-323-1  View
317667 61461 CVE-2006-2776 TA06-153A  View
317668 61461 CVE-2006-2776 ADV-2006-2106  View
317669 61461 CVE-2006-2776 ADV-2006-3748  View
317670 61461 CVE-2006-2776 ADV-2006-3749  View
317671 61461 CVE-2006-2776 ADV-2007-0573  View
317672 61461 CVE-2006-2776 ADV-2008-0083  View
317673 61461 CVE-2006-2776 mozilla-contentdefined-code-execution(26848)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58120 JVNDB-2006-000316 Mozilla 製品の setter() 関数における任意のコードを実行される脆弱性 Mozilla Firefox には JavaScript の setter メソッドが、特権をもつ UI コードによって呼び出されてしまうため、Web コンテンツによって提供された JavaScript に特権が適用されてしまう脆弱性が存在します。 CVE-2006-2776 18878 CVE-2006-2776 61461 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000316.html 2006-06-01 2007-04-01 View