CVE-2006-3802 — Cross-site Scripting in Firefox

17 documents7 sources
Severity
5.8MEDIUMNVD
EPSS
3.8%
top 11.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Mozilla ThunderbirdDebian FirefoxDebian Thunderbird+2 more
Timeline
PublishedJul 27
Latest updateMay 3

Description

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages6 packages

▶Debianmozilla/thunderbird< 1.5.0.5-1+3
▶NVDmozilla/firefox5 versions+4
▶NVDmozilla/seamonkey1.0, 1.0.1, 1.0.2+2
▶NVDmozilla/thunderbird1.5, 1.5.0.2, 1.5.0.4+2
▶debiandebian/firefox< firefox 1.5.dfsg+1.5.0.5-1 (sid)

Patches

Patch: secunia.com ↗Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pg4x-mm39-59q8: Mozilla Firefox before 1↗2022-05-03
▶
OSV
CVE-2006-3802: Mozilla Firefox before 1↗2006-07-27
▶

📋Vendor Advisories

5
Ubuntu
Thunderbird vulnerabilities↗2006-09-22
▶
Ubuntu
Thunderbird vulnerabilities↗2006-07-29
▶
Ubuntu
firefox vulnerabilities↗2006-07-28
▶
Red Hat
security flaw↗2006-07-26
▶
Debian
CVE-2006-3802: firefox - Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before...↗2006
▶

💬Community

9
Bugzilla
CVE-2006-3802 security flaw↗2018-08-16
▶
Bugzilla
Seamonkey multiple vulnerabilities: CVE-2006-{3113,3677,3801-3812}↗2006-07-27
▶
Bugzilla
major (public) security flaws fixed in firefox 1.5.0.5: CVE-2006-3113, CVE-2006-3677, CVE-2006-3801, CVE-2006-3802, CVE-2006-3803,CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3↗2006-07-27
▶
Bugzilla
CVE-2006-3801 Multiple Seamonkey issues (CVE-2006-3677, CVE-2006-3113, CVE-2006-3802, CVE-2006-3803, CVE-2006-3804, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3809, CVE-2006-↗2006-07-26
▶
Bugzilla
CVE-2006-3801 Multiple Seamonkey issues (CVE-2006-3677, CVE-2006-3113, CVE-2006-3802, CVE-2006-3803, CVE-2006-3804, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3809, CVE-2006-↗2006-07-25
▶