NVD

Id
63194  
Name
CVE-2006-4561  
Description
Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser"s session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker"s control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-05  
Modified Date
2008-11-15  
Seq
2006-4561  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329119 63194 CVE-2006-4561 http://polyboy.net/xss/dnsslurp.html  View
329120 63194 CVE-2006-4561 http://shampoo.antville.org/stories/1451301/  View
329121 63194 CVE-2006-4561 20060814 (somewhat) breaking the same-origin policy by undermining dns-pinning  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59787 JVNDB-2006-002053 Mozilla Firefox における任意の JavaScript を実行される脆弱性 Mozilla Firefox には、任意のイントラネット Web サーバにおいてブラウザセッションのコンテキストにある任意の JavaScript を実行される脆弱性が存在します。 CVE-2006-4561 20663 CVE-2006-4561 63194 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002053.html 2006-09-05 2012-09-25 View