CVE-2006-0299

Published: Feb 2, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin restrictions.

Affected (5)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 beta
Mozilla Thunderbird	Version 1.5

References (24)

http://secunia.com/advisories/18700

Source: secalert@redhat.com

http://secunia.com/advisories/18704

Source: secalert@redhat.com

http://secunia.com/advisories/22065

Source: secalert@redhat.com

http://securitytracker.com/id?1015570

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2006/mfsa2006-08.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16476

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/0413

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3749

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=322312

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/24437

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1625

Source: secalert@redhat.com

http://secunia.com/advisories/18700

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18704

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22065

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015570

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2006/mfsa2006-08.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16476

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0413

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3749

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=322312

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24437

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1625

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.