NVD

Id
62470  
Name
CVE-2006-3802  
Description
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-27  
Modified Date
2011-03-07  
Seq
2006-3802  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324192 62470 CVE-2006-3802 20060703-01-P  View
324193 62470 CVE-2006-3802 oval:org.mitre.oval:def:9611  View
324194 62470 CVE-2006-3802 RHSA-2006:0609  View
324195 62470 CVE-2006-3802 GLSA-200608-02  View
324196 62470 CVE-2006-3802 GLSA-200608-04  View
324197 62470 CVE-2006-3802 1016586  View
324198 62470 CVE-2006-3802 1016587  View
324199 62470 CVE-2006-3802 1016588  View
324200 62470 CVE-2006-3802 GLSA-200608-03  View
324201 62470 CVE-2006-3802 MDKSA-2006:143  View
324202 62470 CVE-2006-3802 MDKSA-2006:145  View
324203 62470 CVE-2006-3802 MDKSA-2006:146  View
324204 62470 CVE-2006-3802 http://www.mozilla.org/security/announce/2006/mfsa2006-47.html  View
324205 62470 CVE-2006-3802 SUSE-SA:2006:048  View
324206 62470 CVE-2006-3802 RHSA-2006:0594  View
324207 62470 CVE-2006-3802 RHSA-2006:0608  View
324208 62470 CVE-2006-3802 RHSA-2006:0610  View
324209 62470 CVE-2006-3802 RHSA-2006:0611  View
324210 62470 CVE-2006-3802 20060727 rPSA-2006-0137-1 firefox  View
324211 62470 CVE-2006-3802 HPSBUX02156  View
324212 62470 CVE-2006-3802 SSRT061181  View
324213 62470 CVE-2006-3802 19181  View
324214 62470 CVE-2006-3802 USN-350-1  View
324215 62470 CVE-2006-3802 USN-354-1  View
324216 62470 CVE-2006-3802 USN-327-1  View
324217 62470 CVE-2006-3802 USN-329-1  View
324218 62470 CVE-2006-3802 ADV-2006-2998  View
324219 62470 CVE-2006-3802 ADV-2006-3748  View
324220 62470 CVE-2006-3802 ADV-2006-3749  View
324221 62470 CVE-2006-3802 ADV-2008-0083  View
324222 62470 CVE-2006-3802 mozilla-dom-method-xss(27983)  View
324223 62470 CVE-2006-3802 https://issues.rpath.com/browse/RPL-536  View
324224 62470 CVE-2006-3802 https://issues.rpath.com/browse/RPL-537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58251 JVNDB-2006-000447 Mozilla 製品における異なるドメインからネイティブ DOM メソッドを制御される脆弱性 Mozilla 製品には、DOM (Document Object Model) メソッド内におけるデータの取り扱いに不備が存在するため、ページ内で document.getElementById() 等の標準的な DOM メソッドを使用している場合、異なるドメインからネイティブ DOM メソッドを制御可能にしてしまう問題が存在します。 CVE-2006-3802 19904 CVE-2006-3802 62470 5.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000447.html 2006-07-25 2007-04-01 View