NVD

Id
62476  
Name
CVE-2006-3808  
Description
Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-27  
Modified Date
2011-03-07  
Seq
2006-3808  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324409 62476 CVE-2006-3808 20060703-01-P  View
324410 62476 CVE-2006-3808 oval:org.mitre.oval:def:10845  View
324411 62476 CVE-2006-3808 RHSA-2006:0609  View
324412 62476 CVE-2006-3808 GLSA-200608-02  View
324413 62476 CVE-2006-3808 1016586  View
324414 62476 CVE-2006-3808 1016587  View
324415 62476 CVE-2006-3808 1016588  View
324416 62476 CVE-2006-3808 DSA-1159  View
324417 62476 CVE-2006-3808 DSA-1160  View
324418 62476 CVE-2006-3808 DSA-1161  View
324419 62476 CVE-2006-3808 GLSA-200608-03  View
324420 62476 CVE-2006-3808 MDKSA-2006:143  View
324421 62476 CVE-2006-3808 MDKSA-2006:145  View
324422 62476 CVE-2006-3808 http://www.mozilla.org/security/announce/2006/mfsa2006-52.html  View
324423 62476 CVE-2006-3808 SUSE-SA:2006:048  View
324424 62476 CVE-2006-3808 RHSA-2006:0594  View
324425 62476 CVE-2006-3808 RHSA-2006:0608  View
324426 62476 CVE-2006-3808 RHSA-2006:0610  View
324427 62476 CVE-2006-3808 RHSA-2006:0611  View
324428 62476 CVE-2006-3808 20060727 rPSA-2006-0137-1 firefox  View
324429 62476 CVE-2006-3808 HPSBUX02156  View
324430 62476 CVE-2006-3808 SSRT061181  View
324431 62476 CVE-2006-3808 19181  View
324432 62476 CVE-2006-3808 USN-354-1  View
324433 62476 CVE-2006-3808 USN-361-1  View
324434 62476 CVE-2006-3808 USN-327-1  View
324435 62476 CVE-2006-3808 ADV-2006-2998  View
324436 62476 CVE-2006-3808 ADV-2006-3748  View
324437 62476 CVE-2006-3808 ADV-2006-3749  View
324438 62476 CVE-2006-3808 ADV-2008-0083  View
324439 62476 CVE-2006-3808 mozilla-pac-code-execution(27989)  View
324440 62476 CVE-2006-3808 https://issues.rpath.com/browse/RPL-536  View
324441 62476 CVE-2006-3808 https://issues.rpath.com/browse/RPL-537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58257 JVNDB-2006-000453 Mozilla Firefox の PAC スクリプトの処理における権限昇格の脆弱性 Mozilla Firefox の PAC スクリプトの FindProxyForURL() 関数において、PAC サンドボックスに混入した特権付きオブジェクトで eval() 関数を実行することで、URL の「ホスト名」に含まれるスクリプトが特権付きで実行可能となる脆弱性が存在します。 CVE-2006-3808 19910 CVE-2006-3808 62476 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000453.html 2006-07-25 2007-04-01 View