CVE-2006-1725

Severity

26%

Complexity

49%

Confidentiality

48%

Fixed in: Firefox 1.5.0.2 SeaMonkey 1.0.1

Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code.

Fixed in: Firefox 1.5.0.2 SeaMonkey 1.0.1

CVSS 2.0 Base Score 2.6. CVSS Attack Vector: network. CVSS Attack Complexity: high. CVSS Vector: (AV:N/AC:H/Au:N/C:N/I:P/A:N).

Overview

Type

Mozilla

First reported 18 years ago

2006-04-14 10:02:00

Last updated 6 years ago

2018-10-18 16:34:00

Affected Software

Mozilla Firefox

Mozilla SeaMonkey

References

19631

Third Party Advisory

19649

Third Party Advisory, Vendor Advisory

22066

Third Party Advisory

http://www.mozilla.org/security/announce/2006/mfsa2006-29.html

Vendor Advisory

SSRT061181

17516

Third Party Advisory, VDB Entry

ADV-2006-1356

Permissions Required, Third Party Advisory

ADV-2006-3748

Permissions Required, Third Party Advisory

ADV-2008-0083

Permissions Required, Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=327014

Exploit, Issue Tracking, Vendor Advisory

mozilla-xul-window-spoofing(25827)

Third Party Advisory, VDB Entry

oval:org.mitre.oval:def:1471

Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.