NVD

Id
61469  
Name
CVE-2006-2784  
Description
The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the "Manual Install" button, then using nested javascript: URLs. NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-02  
Modified Date
2011-06-20  
Seq
2006-2784  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317892 61469 CVE-2006-2784 oval:org.mitre.oval:def:9768  View
317893 61469 CVE-2006-2784 RHSA-2006:0609  View
317894 61469 CVE-2006-2784 1016202  View
317895 61469 CVE-2006-2784 DSA-1118  View
317896 61469 CVE-2006-2784 DSA-1120  View
317897 61469 CVE-2006-2784 DSA-1134  View
317898 61469 CVE-2006-2784 GLSA-200606-12  View
317899 61469 CVE-2006-2784 MDKSA-2006:143  View
317900 61469 CVE-2006-2784 MDKSA-2006:145  View
317901 61469 CVE-2006-2784 http://www.mozilla.org/security/announce/2006/mfsa2006-36.html  View
317902 61469 CVE-2006-2784 SUSE-SA:2006:035  View
317903 61469 CVE-2006-2784 RHSA-2006:0578  View
317904 61469 CVE-2006-2784 RHSA-2006:0594  View
317905 61469 CVE-2006-2784 RHSA-2006:0610  View
317906 61469 CVE-2006-2784 RHSA-2006:0611  View
317907 61469 CVE-2006-2784 20060602 rPSA-2006-0091-1 firefox thunderbird  View
317908 61469 CVE-2006-2784 SSRT061181  View
317909 61469 CVE-2006-2784 18228  View
317910 61469 CVE-2006-2784 USN-296-1  View
317911 61469 CVE-2006-2784 USN-296-2  View
317912 61469 CVE-2006-2784 USN-297-3  View
317913 61469 CVE-2006-2784 USN-323-1  View
317914 61469 CVE-2006-2784 ADV-2006-2106  View
317915 61469 CVE-2006-2784 ADV-2006-3748  View
317916 61469 CVE-2006-2784 ADV-2008-0083  View
317917 61469 CVE-2006-2784 mozilla-pluginspage-code-execution(26847)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58128 JVNDB-2006-000324 Mozilla Firefox のプラグイン検索サービスにおける任意のスクリプトを実行される脆弱性 Mozilla Firefox のプラグイン検索サービス (PFS) において、PLUGINSPAGE 属性に指定される URL に対するチェックが不適切であるため、ネストされた「javascript:」形式の URL が指定されている場合に、[手動インストール] ボタンをクリックするとスクリプトが実行されてしまう脆弱性が存在します。 CVE-2006-2784 18886 CVE-2006-2784 61469 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000324.html 2006-06-01 2007-04-01 View