CVE-2006-4569

Published: Sep 15, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.

Affected (1)

Products: Mozilla: Firefox

Mozilla

1 product

Firefox

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 1.5.0.6

References (56)

http://secunia.com/advisories/21949

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/21950

Source: secalert@redhat.com

http://secunia.com/advisories/22001

Source: secalert@redhat.com

http://secunia.com/advisories/22025

Source: secalert@redhat.com

http://secunia.com/advisories/22056

Source: secalert@redhat.com

http://secunia.com/advisories/22066

Source: secalert@redhat.com

http://secunia.com/advisories/22195

Source: secalert@redhat.com

http://secunia.com/advisories/22210

Source: secalert@redhat.com

http://secunia.com/advisories/22422

Source: secalert@redhat.com

http://secunia.com/advisories/24711

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200609-19.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1016849

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:168

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2006/mfsa2006-62.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_54_mozilla.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0675.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446140/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/20042

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-351-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-354-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3748

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1198

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/28957

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-640

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10650

Source: secalert@redhat.com

http://secunia.com/advisories/21949