CVE-2006-1729

Published: Apr 14, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.

Affected (7)

Products: Mozilla: Firefox, Mozilla Suite, Seamonkey · Canonical: Ubuntu Linux

3 products

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	From 1.0 to 1.0.8
Mozilla Firefox	From 1.5 to 1.5.0.2
Mozilla Mozilla Suite	Before 1.7.13
Mozilla Seamonkey	Before 1.0.1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 4.10
Canonical Ubuntu Linux	Version 5.04
Canonical Ubuntu Linux	Version 5.10

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (100)

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt (unsafe URL)

Source: secalert@redhat.com

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/19631

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19649

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19696

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19714

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19721

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19729

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19746

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19759

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19794

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19811

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19852

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19862

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19863

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19902

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19941

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/21033

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/21622

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/22066

Source: secalert@redhat.com

Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1

Source: secalert@redhat.com

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2006/dsa-1044

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2006/dsa-1046

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2006/dsa-1051

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:075

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:076

Source: secalert@redhat.com

Third Party Advisory

http://www.mozilla.org/security/announce/2006/mfsa2006-23.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_35_mozilla.html

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2006-0328.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2006-0329.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/436296/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/436338/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446658/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17516

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2006/1356

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2006/3391

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2006/3748

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/25823

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10922

Source: secalert@redhat.com

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1929

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/271-1/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/275-1/

Source: secalert@redhat.com

Third Party Advisory

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt (unsafe URL)