CVE - CVE-2006-6503

CVE-ID
CVE-2006-6503	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1017414 URL:http://securitytracker.com/id?1017414 MISC:1017415 URL:http://securitytracker.com/id?1017415 MISC:1017416 URL:http://securitytracker.com/id?1017416 MISC:20061202-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc MISC:20061222 rPSA-2006-0234-1 firefox URL:http://www.securityfocus.com/archive/1/455145/100/0/threaded MISC:20070102 rPSA-2006-0234-2 firefox thunderbird URL:http://www.securityfocus.com/archive/1/455728/100/200/threaded MISC:21668 URL:http://www.securityfocus.com/bid/21668 MISC:23282 URL:http://secunia.com/advisories/23282 MISC:23420 URL:http://secunia.com/advisories/23420 MISC:23422 URL:http://secunia.com/advisories/23422 MISC:23433 URL:http://secunia.com/advisories/23433 MISC:23439 URL:http://secunia.com/advisories/23439 MISC:23440 URL:http://secunia.com/advisories/23440 MISC:23468 URL:http://secunia.com/advisories/23468 MISC:23514 URL:http://secunia.com/advisories/23514 MISC:23545 URL:http://secunia.com/advisories/23545 MISC:23589 URL:http://secunia.com/advisories/23589 MISC:23591 URL:http://secunia.com/advisories/23591 MISC:23598 URL:http://secunia.com/advisories/23598 MISC:23601 URL:http://secunia.com/advisories/23601 MISC:23614 URL:http://secunia.com/advisories/23614 MISC:23618 URL:http://secunia.com/advisories/23618 MISC:23672 URL:http://secunia.com/advisories/23672 MISC:23692 URL:http://secunia.com/advisories/23692 MISC:23988 URL:http://secunia.com/advisories/23988 MISC:24078 URL:http://secunia.com/advisories/24078 MISC:24390 URL:http://secunia.com/advisories/24390 MISC:ADV-2006-5068 URL:~~http://www.vupen.com/english/advisories/2006/5068~~ (Obsolete source) MISC:ADV-2008-0083 URL:~~http://www.vupen.com/english/advisories/2008/0083~~ (Obsolete source) MISC:DSA-1253 URL:http://www.debian.org/security/2007/dsa-1253 MISC:DSA-1258 URL:http://www.debian.org/security/2007/dsa-1258 MISC:DSA-1265 URL:http://www.debian.org/security/2007/dsa-1265 MISC:FEDORA-2006-1491 URL:http://fedoranews.org/cms/node/2297 MISC:FEDORA-2007-004 URL:http://fedoranews.org/cms/node/2338 MISC:GLSA-200701-02 URL:http://security.gentoo.org/glsa/glsa-200701-02.xml MISC:GLSA-200701-03 URL:http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml MISC:GLSA-200701-04 URL:http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml MISC:HPSBUX02153 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 MISC:MDKSA-2007:010 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2007:010~~ (Obsolete source) MISC:MDKSA-2007:011 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2007:011~~ (Obsolete source) MISC:RHSA-2006:0758 URL:http://rhn.redhat.com/errata/RHSA-2006-0758.html MISC:RHSA-2006:0759 URL:http://rhn.redhat.com/errata/RHSA-2006-0759.html MISC:RHSA-2006:0760 URL:http://rhn.redhat.com/errata/RHSA-2006-0760.html MISC:SSRT061181 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 MISC:SUSE-SA:2006:080 URL:http://www.novell.com/linux/security/advisories/2006_80_mozilla.html MISC:SUSE-SA:2007:006 URL:http://www.novell.com/linux/security/advisories/2007_06_mozilla.html MISC:TA06-354A URL:http://www.us-cert.gov/cas/techalerts/TA06-354A.html MISC:USN-398-1 URL:http://www.ubuntu.com/usn/usn-398-1 MISC:USN-398-2 URL:http://www.ubuntu.com/usn/usn-398-2 MISC:USN-400-1 URL:http://www.ubuntu.com/usn/usn-400-1 MISC:VU#405092 URL:http://www.kb.cert.org/vuls/id/405092 MISC:http://www.mozilla.org/security/announce/2006/mfsa2006-72.html URL:http://www.mozilla.org/security/announce/2006/mfsa2006-72.html MISC:https://issues.rpath.com/browse/RPL-883 URL:https://issues.rpath.com/browse/RPL-883 MISC:oval:org.mitre.oval:def:10895 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10895
Assigning CNA
Red Hat, Inc.
Date Record Created
20061213	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20061213)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)