CVE-2006-3812Firefox vulnerability

17 documents7 sources
Severity
2.6LOWNVD
EPSS
13.4%
top 5.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 29
Latest updateMay 3

Description

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages6 packages

Debianmozilla/thunderbird< 1.5.0.5-1+3
NVDmozilla/firefox5 versions+4
NVDmozilla/seamonkey1.0, 1.0.1, 1.0.2+2
NVDmozilla/thunderbird7 versions+6
debiandebian/firefox< firefox 1.5.dfsg+1.5.0.5-1 (sid)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-qjrp-xgm3-mxhj: Mozilla Firefox before 12022-05-03
OSV
CVE-2006-3812: Mozilla Firefox before 12006-07-29

📋Vendor Advisories

5
Ubuntu
Thunderbird vulnerabilities2006-09-22
Ubuntu
Thunderbird vulnerabilities2006-07-29
Ubuntu
firefox vulnerabilities2006-07-28
Red Hat
vulnerabilities: CVE-2006-{3113,3677,3801-3812}2006-07-26
Debian
CVE-2006-3812: firefox - Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before...2006

💬Community

9
Bugzilla
CVE-2006-3812 thunderbird issues2006-08-15
Bugzilla
CVE-2006-3801, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3809, CVE-2006-3811, CVE-2006-3812: major (public) security flaws fixed in firefox 1.5.0.52006-07-28
Bugzilla
Seamonkey multiple vulnerabilities: CVE-2006-{3113,3677,3801-3812}2006-07-27
Bugzilla
major (public) security flaws fixed in firefox 1.5.0.5: CVE-2006-3113, CVE-2006-3677, CVE-2006-3801, CVE-2006-3802, CVE-2006-3803,CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-32006-07-27
Bugzilla
CVE-2006-3801 Multiple Seamonkey issues (CVE-2006-3677, CVE-2006-3113, CVE-2006-3802, CVE-2006-3803, CVE-2006-3804, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3809, CVE-2006-2006-07-26