VulnerabilityModified

CVE-2006-3810

Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct.

MEDIUM 6.8EPSS 3.38%

Does this matter?

Lower severity and a low EPSS score (3.38%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 3.38% probability · 88th percentile
CISA KEV: Not listed
Affected: mozilla/firefox · mozilla/seamonkey · mozilla/thunderbird
Source: secalert@redhat.com

References

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
http://rhn.redhat.com/errata/RHSA-2006-0609.html
http://secunia.com/advisories/19873Patch, Vendor Advisory
http://secunia.com/advisories/21216Patch, Vendor Advisory
http://secunia.com/advisories/21228Patch, Vendor Advisory
http://secunia.com/advisories/21229Patch, Vendor Advisory
http://secunia.com/advisories/21243
http://secunia.com/advisories/21246
http://secunia.com/advisories/21250
http://secunia.com/advisories/21262
http://secunia.com/advisories/21269
http://secunia.com/advisories/21270
http://secunia.com/advisories/21275
http://secunia.com/advisories/21336
http://secunia.com/advisories/21343
http://secunia.com/advisories/21358
http://secunia.com/advisories/21361
http://secunia.com/advisories/21529
http://secunia.com/advisories/21532
http://secunia.com/advisories/21607
http://secunia.com/advisories/21631
http://secunia.com/advisories/21634
http://secunia.com/advisories/21654
http://secunia.com/advisories/22055
http://secunia.com/advisories/22065
http://secunia.com/advisories/22066
http://secunia.com/advisories/22210
http://security.gentoo.org/glsa/glsa-200608-02.xml
http://security.gentoo.org/glsa/glsa-200608-04.xml
http://securitytracker.com/id?1016586

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.