← volver
CVE-2006-2785

CVE-2006-2785

EPSS 1.5%
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting "Show only this frame" on a frame whose SRC attribute contains a Javascript URL.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://rhn.redhat.com/errata/RHSA-2006-0609.htmlhttp://secunia.com/advisories/20376http://secunia.com/advisories/20561http://secunia.com/advisories/21134http://secunia.com/advisories/21176http://secunia.com/advisories/21178http://secunia.com/advisories/21183http://secunia.com/advisories/21188http://secunia.com/advisories/21269http://secunia.com/advisories/21270http://secunia.com/advisories/21324http://secunia.com/advisories/21336