NVD

Id
65048  
Name
CVE-2006-6503  
Description
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-19  
Modified Date
2011-03-07  
Seq
2006-6503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339651 65048 CVE-2006-6503 20061202-01-P  View
339652 65048 CVE-2006-6503 FEDORA-2006-1491  View
339653 65048 CVE-2006-6503 FEDORA-2007-004  View
339654 65048 CVE-2006-6503 SSRT061181  View
339655 65048 CVE-2006-6503 oval:org.mitre.oval:def:10895  View
339656 65048 CVE-2006-6503 RHSA-2006:0758  View
339657 65048 CVE-2006-6503 RHSA-2006:0759  View
339658 65048 CVE-2006-6503 RHSA-2006:0760  View
339659 65048 CVE-2006-6503 GLSA-200701-02  View
339660 65048 CVE-2006-6503 1017414  View
339661 65048 CVE-2006-6503 1017415  View
339662 65048 CVE-2006-6503 1017416  View
339663 65048 CVE-2006-6503 DSA-1253  View
339664 65048 CVE-2006-6503 DSA-1258  View
339665 65048 CVE-2006-6503 DSA-1265  View
339666 65048 CVE-2006-6503 GLSA-200701-03  View
339667 65048 CVE-2006-6503 GLSA-200701-04  View
339668 65048 CVE-2006-6503 VU#405092  View
339669 65048 CVE-2006-6503 MDKSA-2007:010  View
339670 65048 CVE-2006-6503 MDKSA-2007:011  View
339671 65048 CVE-2006-6503 http://www.mozilla.org/security/announce/2006/mfsa2006-72.html  View
339672 65048 CVE-2006-6503 SUSE-SA:2006:080  View
339673 65048 CVE-2006-6503 SUSE-SA:2007:006  View
339674 65048 CVE-2006-6503 20061222 rPSA-2006-0234-1 firefox  View
339675 65048 CVE-2006-6503 20070102 rPSA-2006-0234-2 firefox thunderbird  View
339676 65048 CVE-2006-6503 21668  View
339677 65048 CVE-2006-6503 USN-398-1  View
339678 65048 CVE-2006-6503 USN-398-2  View
339679 65048 CVE-2006-6503 USN-400-1  View
339680 65048 CVE-2006-6503 TA06-354A  View
339681 65048 CVE-2006-6503 ADV-2006-5068  View
339682 65048 CVE-2006-6503 ADV-2008-0083  View
339683 65048 CVE-2006-6503 https://issues.rpath.com/browse/RPL-883  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58642 JVNDB-2006-000838 Mozilla 製品における img.src を利用したクロスサイトスクリプティングの脆弱性 Mozilla 製品には、フレームに読み込んだ IMG 要素の src 属性を javascript URI に変更可能であるため、クロスサイトスクリプティング攻撃に対する保護を回避される脆弱性が存在します。 CVE-2006-6503 22605 CVE-2006-6503 65048 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000838.html 2006-12-19 2007-04-01 View