NVD

Id
61579  
Name
CVE-2006-2894  
Description
Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-07  
Modified Date
2013-07-03  
Seq
2006-2894  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318519 61579 CVE-2006-2894 20070211 Firefox focus stealing vulnerability (possibly other browsers)  View
318520 61579 CVE-2006-2894 20070212 Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)  View
318521 61579 CVE-2006-2894 SSRT061181  View
318522 61579 CVE-2006-2894 http://lcamtuf.coredump.cx/focusbug/  View
318523 61579 CVE-2006-2894 20060605 file upload widgets in IE and Firefox have issues  View
318524 61579 CVE-2006-2894 20070211 Firefox focus stealing vulnerability (possibly other browsers)  View
318525 61579 CVE-2006-2894 1059  View
318526 61579 CVE-2006-2894 1018837  View
318527 61579 CVE-2006-2894 201516  View
318528 61579 CVE-2006-2894 http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html  View
318529 61579 CVE-2006-2894 http://www.gnucitizen.org/blog/browser-focus-rip  View
318530 61579 CVE-2006-2894 MDKSA-2007:202  View
318531 61579 CVE-2006-2894 MDKSA-2006:143  View
318532 61579 CVE-2006-2894 MDKSA-2006:145  View
318533 61579 CVE-2006-2894 http://www.mozilla.org/security/announce/2007/mfsa2007-32.html  View
318534 61579 CVE-2006-2894 SUSE-SA:2007:057  View
318535 61579 CVE-2006-2894 20071026 rPSA-2007-0225-1 firefox  View
318536 61579 CVE-2006-2894 20071029 FLEA-2007-0062-1 firefox  View
318537 61579 CVE-2006-2894 20071029 rPSA-2007-0225-2 firefox thunderbird  View
318538 61579 CVE-2006-2894 18308  View
318539 61579 CVE-2006-2894 http://www.thanhngan.org/fflinuxversion.html  View
318540 61579 CVE-2006-2894 USN-536-1  View
318541 61579 CVE-2006-2894 USN-535-1  View
318542 61579 CVE-2006-2894 ADV-2006-2160  View
318543 61579 CVE-2006-2894 ADV-2006-2162  View
318544 61579 CVE-2006-2894 ADV-2006-2163  View
318545 61579 CVE-2006-2894 ADV-2006-2164  View
318546 61579 CVE-2006-2894 ADV-2007-3544  View
318547 61579 CVE-2006-2894 ADV-2008-0083  View
318548 61579 CVE-2006-2894 https://bugzilla.mozilla.org/show_bug.cgi?id=290478  View
318549 61579 CVE-2006-2894 https://bugzilla.mozilla.org/show_bug.cgi?id=370092  View
318550 61579 CVE-2006-2894 https://bugzilla.mozilla.org/show_bug.cgi?id=56236  View
318551 61579 CVE-2006-2894 https://issues.rpath.com/browse/RPL-1858  View
318552 61579 CVE-2006-2894 FEDORA-2007-2664  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58712 JVNDB-2006-000978 Mozilla Firefox/SeaMonkey のフォーカス処理における情報漏えいの脆弱性 Mozilla Firefox および SeaMonkey において、OnKeyDown, OnKeyPress, and OnKeyUp イベントのフォーカス処理に不備があり、キーストロークをコピーされる情報漏えいの脆弱性が存在します。 CVE-2006-2894 18996 CVE-2006-2894 61579 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000978.html 2006-06-07 2008-01-23 View