NVD

Id
62477  
Name
CVE-2006-3809  
Description
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-27  
Modified Date
2011-03-07  
Seq
2006-3809  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324442 62477 CVE-2006-3809 20060703-01-P  View
324443 62477 CVE-2006-3809 oval:org.mitre.oval:def:9753  View
324444 62477 CVE-2006-3809 RHSA-2006:0609  View
324445 62477 CVE-2006-3809 GLSA-200608-02  View
324446 62477 CVE-2006-3809 GLSA-200608-04  View
324447 62477 CVE-2006-3809 1016586  View
324448 62477 CVE-2006-3809 1016587  View
324449 62477 CVE-2006-3809 1016588  View
324450 62477 CVE-2006-3809 DSA-1159  View
324451 62477 CVE-2006-3809 DSA-1160  View
324452 62477 CVE-2006-3809 DSA-1161  View
324453 62477 CVE-2006-3809 GLSA-200608-03  View
324454 62477 CVE-2006-3809 MDKSA-2006:143  View
324455 62477 CVE-2006-3809 MDKSA-2006:145  View
324456 62477 CVE-2006-3809 MDKSA-2006:146  View
324457 62477 CVE-2006-3809 http://www.mozilla.org/security/announce/2006/mfsa2006-53.html  View
324458 62477 CVE-2006-3809 SUSE-SA:2006:048  View
324459 62477 CVE-2006-3809 RHSA-2006:0594  View
324460 62477 CVE-2006-3809 RHSA-2006:0608  View
324461 62477 CVE-2006-3809 RHSA-2006:0610  View
324462 62477 CVE-2006-3809 RHSA-2006:0611  View
324463 62477 CVE-2006-3809 20060727 rPSA-2006-0137-1 firefox  View
324464 62477 CVE-2006-3809 HPSBUX02156  View
324465 62477 CVE-2006-3809 SSRT061181  View
324466 62477 CVE-2006-3809 19181  View
324467 62477 CVE-2006-3809 USN-350-1  View
324468 62477 CVE-2006-3809 USN-354-1  View
324469 62477 CVE-2006-3809 USN-361-1  View
324470 62477 CVE-2006-3809 USN-327-1  View
324471 62477 CVE-2006-3809 USN-329-1  View
324472 62477 CVE-2006-3809 ADV-2006-2998  View
324473 62477 CVE-2006-3809 ADV-2006-3748  View
324474 62477 CVE-2006-3809 ADV-2006-3749  View
324475 62477 CVE-2006-3809 ADV-2008-0083  View
324476 62477 CVE-2006-3809 mozilla-universalbrowserread-escalation(27990)  View
324477 62477 CVE-2006-3809 https://issues.rpath.com/browse/RPL-536  View
324478 62477 CVE-2006-3809 https://issues.rpath.com/browse/RPL-537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58258 JVNDB-2006-000454 Mozilla 製品における UniversalXPConnect 特権を取得される脆弱性 Mozilla 製品には、UniversalBrowserRead 特権 (任意のサイトやウィンドウから非公開データを読み取る権限) を与えられたスクリプトが、より強力な UniversalXPConnect 特権 (ソフトウェアを実行あるいはインストールする権限) と同等の権限を得ることが可能である問題があります。 CVE-2006-3809 19911 CVE-2006-3809 62477 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000454.html 2006-07-25 2007-04-01 View