Home > Vulnerability Database > CVE-2006-0296

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-0296

Date: February 2, 2006

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file.

Severity Score

5.3

Related Resources (65)

Url: http://www.securityfocus.com/archive/1/446657/100/200/threaded

Url: http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml

Url: http://www.securityfocus.com/bid/16476

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1

Url: http://www.securityfocus.com/archive/1/425978/100/0/threaded

Url: http://www.vupen.com/english/advisories/2006/3391

Url: http://secunia.com/advisories/19852

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-0296

Url: http://secunia.com/advisories/19780

Url: http://www.vupen.com/english/advisories/2006/3749

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:078

Url: ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U

Url: http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:036

Url: http://secunia.com/advisories/22065

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:037

Url: http://www.debian.org/security/2006/dsa-1044

Url: http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm

Url: http://www.securityfocus.com/archive/1/425975/100/0/threaded

Url: http://www.debian.org/security/2006/dsa-1046

Url: http://secunia.com/advisories/19902

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/24434

Url: http://secunia.com/advisories/19823

Url: http://secunia.com/advisories/19746

Url: http://secunia.com/advisories/19941

Url: http://secunia.com/advisories/19821

Url: http://secunia.com/advisories/19862

Url: http://secunia.com/advisories/19863

Url: http://www.mozilla.org/security/announce/2006/mfsa2006-05.html

Url: http://secunia.com/advisories/21622

Url: http://secunia.com/advisories/19230

Url: http://secunia.com/advisories/20051

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1

Url: http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html

Url: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt

Url: http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html

Url: http://www.us-cert.gov/cas/techalerts/TA06-038A.html

Url: http://secunia.com/advisories/18708

Url: http://secunia.com/advisories/18709

Url: http://www.redhat.com/support/errata/RHSA-2006-0200.html

Url: http://secunia.com/advisories/18706

Url: http://secunia.com/advisories/18704

Url: http://secunia.com/advisories/18705

Url: http://secunia.com/advisories/19759

Url: http://secunia.com/advisories/18703

Url: http://secunia.com/advisories/18700

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=319847

Url: http://secunia.com/advisories/19950

Url: http://www.redhat.com/support/errata/RHSA-2006-0330.html

Url: http://www.novell.com/linux/security/advisories/2006_04_25.html

Url: http://www.securityfocus.com/archive/1/438730/100/0/threaded

Url: http://securitytracker.com/id?1015570

Url: http://www.debian.org/security/2006/dsa-1051

Url: https://usn.ubuntu.com/276-1/

Url: http://secunia.com/advisories/21033

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11803

Url: http://www.vupen.com/english/advisories/2006/0413

Url: http://www.kb.cert.org/vuls/id/592425

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1493

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-0296

Url: https://usn.ubuntu.com/271-1/

Url: http://www.redhat.com/support/errata/RHSA-2006-0199.html

Url: http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml

Url: https://usn.ubuntu.com/275-1/

Url: https://www.mend.io/vulnerability-database/CVE-2006-0296

Severity Score

5.3

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us