Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.1
CVSSv2

CVE-2006-1942

Published: 20/04/2006 Updated: 18/10/2018
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
VMScore: 454
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Subscribe to K-meleon Project

Vulnerability Summary

Mozilla Firefox 1.5.0.2 and possibly other versions prior to 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote malicious users to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."

Vulnerable Product Search on Vulmon Subscribe to Product

k-meleon project k-meleon 0.9.13

mozilla firefox 1.5.0.2

netscape navigator 7.2

netscape navigator 8.0.40

netscape navigator 8.1

Vendor Advisories

Debian Security Advisories: DSA-1134-1 mozilla-thunderbird -- several vulnerabilities
Several security related problems have been discovered in Mozilla which are also present in Mozilla Thunderbird The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2006-1942 Eric Foley discovered that a user can be tricked to expose a local file to a remote attacker by displaying a local file as ...
Debian Security Advisories: DSA-1118-1 mozilla -- several vulnerabilities
Several security related problems have been discovered in Mozilla The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2006-1942 Eric Foley discovered that a user can be tricked to expose a local file to a remote attacker by displaying a local file as image in connection with other vulnerabili ...
Mozilla: "View Image" local resource linking (Windows)
Mozilla Foundation Security Advisory 2006-39 "View Image" local resource linking (Windows) Announced June 1, 2006 Reporter Eric Foley Impact Low Products Firefox, SeaMonkey Fixed in ...

References

NVD-CWE-Otherhttps://bugzilla.mozilla.org/show_bug.cgi?id=334341http://secunia.com/advisories/19698http://www.gavinsharp.com/tmp/ImageVuln.htmlhttp://www.networksecurity.fi/advisories/netscape-view-image.htmlhttp://www.osvdb.org/24713http://secunia.com/advisories/19988http://www.mozilla.org/security/announce/2006/mfsa2006-39.htmlhttp://www.securityfocus.com/bid/18228http://securitytracker.com/id?1016202http://secunia.com/advisories/20376http://www.novell.com/linux/security/advisories/2006_35_mozilla.htmlhttp://www.debian.org/security/2006/dsa-1118http://www.debian.org/security/2006/dsa-1120http://secunia.com/advisories/21183http://secunia.com/advisories/21176http://www.debian.org/security/2006/dsa-1134http://secunia.com/advisories/21324http://secunia.com/advisories/20063http://secunia.com/advisories/22066http://www.vupen.com/english/advisories/2008/0083http://www.vupen.com/english/advisories/2006/2106http://www.vupen.com/english/advisories/2006/3748https://exchange.xforce.ibmcloud.com/vulnerabilities/25925http://www.securityfocus.com/archive/1/446658/100/200/threadedhttp://www.securityfocus.com/archive/1/435795/100/0/threadedhttp://www.securityfocus.com/archive/1/433539/30/5070/threadedhttp://www.securityfocus.com/archive/1/433138/100/0/threadedhttp://www.securityfocus.com/archive/1/431267/100/0/threadedhttps://nvd.nist.govhttps://www.debian.org/security/./dsa-1134
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook