2.6
CVSSv2

CVE-2006-4569

Published: 15/09/2006 Updated: 17/10/2018
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

The popup blocker in Mozilla Firefox prior to 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted malicious users to conduct cross-site scripting (XSS) attacks.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox

Vendor Advisories

Various flaws have been reported that allow an attacker to execute arbitrary code with user privileges by tricking the user into opening a malicious web page containing JavaScript (CVE-2006-4253, CVE-2006-4565, CVE-2006-4566, CVE-2006-4568, CVE-2006-4569 CVE-2006-4571) ...
Mozilla Foundation Security Advisory 2006-62 Popup-blocker cross-site scripting (XSS) Announced September 14, 2006 Reporter shutdown Impact Moderate Products Firefox Fixed in Firef ...