NVD

Id
63201  
Name
CVE-2006-4568  
Description
Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-15  
Modified Date
2011-03-07  
Seq
2006-4568  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329224 63201 CVE-2006-4568 20060901-01-P  View
329225 63201 CVE-2006-4568 oval:org.mitre.oval:def:9843  View
329226 63201 CVE-2006-4568 GLSA-200609-19  View
329227 63201 CVE-2006-4568 GLSA-200610-04  View
329228 63201 CVE-2006-4568 1016855  View
329229 63201 CVE-2006-4568 1016856  View
329230 63201 CVE-2006-4568 http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm  View
329231 63201 CVE-2006-4568 DSA-1192  View
329232 63201 CVE-2006-4568 DSA-1210  View
329233 63201 CVE-2006-4568 MDKSA-2006:168  View
329234 63201 CVE-2006-4568 http://www.mozilla.org/security/announce/2006/mfsa2006-61.html  View
329235 63201 CVE-2006-4568 SUSE-SA:2006:054  View
329236 63201 CVE-2006-4568 RHSA-2006:0675  View
329237 63201 CVE-2006-4568 RHSA-2006:0676  View
329238 63201 CVE-2006-4568 20060915 rPSA-2006-0169-1 firefox thunderbird  View
329239 63201 CVE-2006-4568 20042  View
329240 63201 CVE-2006-4568 USN-351-1  View
329241 63201 CVE-2006-4568 USN-354-1  View
329242 63201 CVE-2006-4568 USN-361-1  View
329243 63201 CVE-2006-4568 DSA-1191  View
329244 63201 CVE-2006-4568 ADV-2006-3617  View
329245 63201 CVE-2006-4568 ADV-2006-3748  View
329246 63201 CVE-2006-4568 ADV-2007-1198  View
329247 63201 CVE-2006-4568 ADV-2008-0083  View
329248 63201 CVE-2006-4568 SSRT061181  View
329249 63201 CVE-2006-4568 mozilla-documentopen-frame-spoofing(28961)  View
329250 63201 CVE-2006-4568 https://bugzilla.mozilla.org/show_bug.cgi?id=343168  View
329251 63201 CVE-2006-4568 https://issues.rpath.com/browse/RPL-640  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58365 JVNDB-2006-000561 Mozilla 製品の document.open() メソッドの処理におけるコンテンツを偽装される脆弱性 Mozilla Firefox および Mozilla SeaMonkey には、document.open() メソッドの処理に不備が存在するため、他のサイトの子フレームに任意のコンテンツを挿入可能な脆弱性が存在します。 CVE-2006-4568 20670 CVE-2006-4568 63201 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000561.html 2006-09-14 2007-04-01 View