CVE-2006-3812

Published: Jul 29, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.

Affected (21)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 beta
Mozilla Thunderbird	Version 1.5.0.1
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.3
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.1
Mozilla Thunderbird	Version 1.5.2
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 1.5 beta2

References (92)

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0609.html

Source: secalert@redhat.com

http://secunia.com/advisories/19873

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/21216

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/21229

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/21243

Source: secalert@redhat.com

http://secunia.com/advisories/21246

Source: secalert@redhat.com

http://secunia.com/advisories/21262

Source: secalert@redhat.com

http://secunia.com/advisories/21270

Source: secalert@redhat.com

http://secunia.com/advisories/21275

Source: secalert@redhat.com

http://secunia.com/advisories/21336

Source: secalert@redhat.com

http://secunia.com/advisories/21343

Source: secalert@redhat.com

http://secunia.com/advisories/21361

Source: secalert@redhat.com

http://secunia.com/advisories/21529

Source: secalert@redhat.com

http://secunia.com/advisories/21532

Source: secalert@redhat.com

http://secunia.com/advisories/21607

Source: secalert@redhat.com

http://secunia.com/advisories/21631

Source: secalert@redhat.com

http://secunia.com/advisories/22055

Source: secalert@redhat.com

http://secunia.com/advisories/22066

Source: secalert@redhat.com

http://secunia.com/advisories/22210

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200608-02.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200608-04.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1016586

Source: secalert@redhat.com

Patch

http://securitytracker.com/id?1016587

Source: secalert@redhat.com

Patch

http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/398492

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:146

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2006/mfsa2006-56.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0594.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0608.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0610.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/441333/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446658/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/19181

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/usn-350-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-354-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3748

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/27993

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-536

Source: secalert@redhat.com

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11013

Source: secalert@redhat.com

https://usn.ubuntu.com/327-1/

Source: secalert@redhat.com

https://usn.ubuntu.com/329-1/

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)