CVE-2006-1727
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.37%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview".
- CVSS 2.0
- 7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
- EPSS
- 6.37% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- mozilla/firefox · mozilla/mozilla suite · mozilla/seamonkey · mozilla/thunderbird · canonical/ubuntu linux
- Source
- secalert@redhat.com
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txtBroken Link
- ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.ascBroken Link
- http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.htmlBroken Link
- http://secunia.com/advisories/19631Third Party Advisory
- http://secunia.com/advisories/19649Third Party Advisory
- http://secunia.com/advisories/19696Third Party Advisory
- http://secunia.com/advisories/19714Third Party Advisory
- http://secunia.com/advisories/19721Third Party Advisory
- http://secunia.com/advisories/19729Third Party Advisory
- http://secunia.com/advisories/19746Third Party Advisory
- http://secunia.com/advisories/19759Third Party Advisory
- http://secunia.com/advisories/19780Third Party Advisory
- http://secunia.com/advisories/19811Third Party Advisory
- http://secunia.com/advisories/19821Third Party Advisory
- http://secunia.com/advisories/19823Third Party Advisory
- http://secunia.com/advisories/19852Third Party Advisory
- http://secunia.com/advisories/19862Third Party Advisory
- http://secunia.com/advisories/19863Third Party Advisory
- http://secunia.com/advisories/19902Third Party Advisory
- http://secunia.com/advisories/19941Third Party Advisory
- http://secunia.com/advisories/19950Third Party Advisory
- http://secunia.com/advisories/20051Third Party Advisory
- http://secunia.com/advisories/21033Third Party Advisory
- http://secunia.com/advisories/21622Third Party Advisory
- http://secunia.com/advisories/22065Third Party Advisory
- http://secunia.com/advisories/22066Third Party Advisory
- http://securitytracker.com/id?1015926Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015927Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015928Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015929Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.