CVE-2006-2894
Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the…
Does this matter?
Lower severity and a low EPSS score (9.83%). Track it; it rarely justifies an emergency change on its own.
Description
Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:N
- EPSS
- 9.83% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- mozilla/firefox · mozilla/mozilla suite · mozilla/seamonkey · netscape/navigator
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2007-02/0166.html
- http://archives.neohapsis.com/archives/bugtraq/2007-02/0187.html
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://lcamtuf.coredump.cx/focusbug/
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.htmlExploit
- http://lists.virus.org/full-disclosure-0702/msg00225.html
- http://secunia.com/advisories/20442Vendor Advisory
- http://secunia.com/advisories/20467Vendor Advisory
- http://secunia.com/advisories/20470Vendor Advisory
- http://secunia.com/advisories/20472Vendor Advisory
- http://secunia.com/advisories/21532Vendor Advisory
- http://secunia.com/advisories/27298Vendor Advisory
- http://secunia.com/advisories/27335Vendor Advisory
- http://secunia.com/advisories/27383Vendor Advisory
- http://secunia.com/advisories/27387Vendor Advisory
- http://secunia.com/advisories/27403Vendor Advisory
- http://secunia.com/advisories/27414Vendor Advisory
- http://securityreason.com/securityalert/1059
- http://securitytracker.com/id?1018837
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
- http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
- http://www.gnucitizen.org/blog/browser-focus-rip
- http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:145
- http://www.mozilla.org/security/announce/2007/mfsa2007-32.html
- http://www.novell.com/linux/security/advisories/2007_57_mozilla.html
- http://www.securityfocus.com/archive/1/482876/100/200/threaded
- http://www.securityfocus.com/archive/1/482925/100/0/threaded
- http://www.securityfocus.com/archive/1/482932/100/200/threaded
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.