CVE - CVE-2006-1942

CVE-ID
CVE-2006-1942	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:18228 URL:http://www.securityfocus.com/bid/18228 BUGTRAQ:20060418 Another flaw in Firefox 1.5.0.2: to open files from remote URL:http://www.securityfocus.com/archive/1/431267/100/0/threaded BUGTRAQ:20060505 Firefox 1.5.0.3 code execution exploit URL:http://www.securityfocus.com/archive/1/433138/100/0/threaded BUGTRAQ:20060507 Re: Firefox 1.5.0.3 code execution exploit URL:http://www.securityfocus.com/archive/1/433539/30/5070/threaded BUGTRAQ:20060602 rPSA-2006-0091-1 firefox thunderbird URL:http://www.securityfocus.com/archive/1/435795/100/0/threaded CONFIRM:http://www.mozilla.org/security/announce/2006/mfsa2006-39.html CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=334341 DEBIAN:DSA-1118 URL:http://www.debian.org/security/2006/dsa-1118 DEBIAN:DSA-1120 URL:http://www.debian.org/security/2006/dsa-1120 DEBIAN:DSA-1134 URL:http://www.debian.org/security/2006/dsa-1134 HP:HPSBUX02153 URL:http://www.securityfocus.com/archive/1/446658/100/200/threaded HP:SSRT061181 URL:http://www.securityfocus.com/archive/1/446658/100/200/threaded MISC:http://www.gavinsharp.com/tmp/ImageVuln.html MISC:http://www.networksecurity.fi/advisories/netscape-view-image.html OSVDB:24713 URL:~~http://www.osvdb.org/24713~~ (Obsolete source) SECTRACK:1016202 URL:http://securitytracker.com/id?1016202 SECUNIA:19698 URL:http://secunia.com/advisories/19698 SECUNIA:19988 URL:http://secunia.com/advisories/19988 SECUNIA:20063 URL:http://secunia.com/advisories/20063 SECUNIA:20376 URL:http://secunia.com/advisories/20376 SECUNIA:21176 URL:http://secunia.com/advisories/21176 SECUNIA:21183 URL:http://secunia.com/advisories/21183 SECUNIA:21324 URL:http://secunia.com/advisories/21324 SECUNIA:22066 URL:http://secunia.com/advisories/22066 SUSE:SUSE-SA:2006:035 URL:http://www.novell.com/linux/security/advisories/2006_35_mozilla.html VUPEN:ADV-2006-2106 URL:~~http://www.vupen.com/english/advisories/2006/2106~~ (Obsolete source) VUPEN:ADV-2006-3748 URL:~~http://www.vupen.com/english/advisories/2006/3748~~ (Obsolete source) VUPEN:ADV-2008-0083 URL:~~http://www.vupen.com/english/advisories/2008/0083~~ (Obsolete source) XF:firefox-viewimage-security-bypass(25925) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/25925
Assigning CNA
MITRE Corporation
Date Record Created
20060420	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060420)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)