CVE-2006-1741

Published: Apr 14, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) "using a modal alert to suspend an event handler while a new page is being loaded", (2) using eval(), and using certain variants involving (3) "new Script;" and (4) using window.__proto__ to extend eval, aka "cross-site JavaScript injection".

Affected (7)

Products: Mozilla: Firefox, Mozilla Suite, Seamonkey · Canonical: Ubuntu Linux

3 products

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	From 1.0 to 1.0.8
Mozilla Firefox	Version 1.5
Mozilla Mozilla Suite	Before 1.7.13
Mozilla Seamonkey	Before 1.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 4.10
Canonical Ubuntu Linux	Version 5.04
Canonical Ubuntu Linux	Version 5.10

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (102)

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt (unsafe URL)

Source: secalert@redhat.com

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/19631

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19696

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19714

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19721

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19729

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19746

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19759

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19780

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19811

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19821

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19823

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19852

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19862

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19863

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19902

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19941

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/19950

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/20051

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/21033

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/21622

Source: secalert@redhat.com

Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1

Source: secalert@redhat.com

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2006/dsa-1044

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2006/dsa-1046

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2006/dsa-1051

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:076

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:078

Source: secalert@redhat.com

Third Party Advisory

http://www.mozilla.org/security/announce/2006/mfsa2006-09.html

Source: secalert@redhat.com

Exploit

http://www.novell.com/linux/security/advisories/2006_04_25.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2006-0328.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2006-0329.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2006-0330.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/436296/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/436338/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/438730/100/0/threaded

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/1356

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/25806

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1855

Source: secalert@redhat.com

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9167

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/271-1/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/275-1/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/276-1/

Source: secalert@redhat.com

Third Party Advisory

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt (unsafe URL)