Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
com/id?1016202 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.mozilla.org/security/announce/2006/mfsa2006-43.html - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://sun
rity/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 - http://secunia.com/advisories/20394 - http://secunia.com/advisories/22066 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
CVE ID: CVE-2006-2778 State: PUBLISHED Published: 2006-06-02T18:00:00 Last Updated: 2024-08-07T17:58:52.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20709 - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubunt
riva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/297-3/ - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://www.us-cert.gov/cas/techalerts/TA06-153A.html - http://secunia.com/advisories/21210 - http://www.vupen.com/english/advisories/2007/0058 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secunia.com/advisories/20382 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/suppor
s.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://secunia.com/advisories/21607 - http://www.mozilla.org/security/announce/2006/mfsa2006-38.html - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http:/
.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26849 - http://ww
w.redhat.com/support/errata/RHSA-2006-0611.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26849 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - https://usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/adviso
//usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9703 - http://www.kb.cert.org/vuls/id/421529
CVE ID: CVE-2006-2779 State: PUBLISHED Published: 2006-06-02T19:00:00 Last Updated: 2024-08-07T17:58:52.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) "Content-implemented tree views," (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27216 - http://secunia.com/advisories/20709 - htt
: - CVE Program Container: References: - http://secunia.com/advisories/27216 - http://secunia.com/advisories/20709 - http://www.debian.org/security/2006/dsa-1160 - http://www.mozilla.org/security/announce/2006/mfsa2006-32.html - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.kb.cert.org/vuls/id/466673 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/297-3/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26843 - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://secunia.com/advisories/20561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9762 - http://www.us-cert.gov/cas/techalerts/TA06-153A.html - http://secunia.com/advisories/21210 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secunia.com/advisories/20382 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/21654 - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name
://secunia.com/advisories/21654 - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://secunia.com/advisories/21634 - http://securitytracker.com/id?1016202 - http://secunia.com/advisories/21607 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://www.vupen.com/english/advisories/2007/3488 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfoc
om/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200387-1 - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/securit
ata/RHSA-2006-0611.html - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - https://usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - ht
http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065 - http://www.debian.org/security/2006/dsa-1159
CVE ID: CVE-2006-2780 State: PUBLISHED Published: 2006-06-02T19:00:00 Last Updated: 2024-08-07T17:58:52.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "jsstr tagify," which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27216 - http://secunia.com/advisories/20709 - http://www.mozilla.org/security/announce/2006/mfsa2006-32.html - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http
6-32.html - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.kb.cert.org/vuls/id/466673 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/297-3/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26843 - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11305 - http://www.us-cert.gov/cas/techalerts/TA06-153A.html - http://secunia.com/advisories/21210 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secun
es/21210 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secunia.com/advisories/20382 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://secunia.com/advisories/21607 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisorie
id?1016202 - http://secunia.com/advisories/21607 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://www.vupen.com/english/advisories/2007/3488 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658
n/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200387-1 - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21
n.com/search/document.do?assetkey=1-26-102943-1 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - https://usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065
CVE ID: CVE-2006-2781 State: PUBLISHED Published: 2006-06-02T19:00:00 Last Updated: 2024-08-07T18:06:25.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20709 - https://usn.ubuntu.com/297-3/ - https://usn.ubuntu.com/323-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26850 - http://secunia.com/advisories/21210 - http://www.
/323-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26850 - http://secunia.com/advisories/21210 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secunia.com/advisories/20382 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://secunia.com/advisories/21607 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21134 - http://secunia.com/advisories
ies/21607 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10247 - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://secunia.com/advisories/20394 - http://secunia.com/
a.com/advisories/21324 - http://secunia.com/advisories/21183 - http://secunia.com/advisories/20394 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - https://usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://secunia.com/advisories/22065 - http://www.mozilla.org/security/announce/2006/mfsa2006-40.html
CVE ID: CVE-2006-2782 State: PUBLISHED Published: 2006-06-02T19:00:00 Last Updated: 2024-08-07T18:06:26.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/296-1/ - http://www.mozilla.org/security/announce/2006/mfsa
en.com/english/advisories/2006/3748 - https://usn.ubuntu.com/296-1/ - http://www.mozilla.org/security/announce/2006/mfsa2006-41.html - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/
?1016202 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-
errata/RHSA-2006-0611.html - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26851 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10429 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
CVE ID: CVE-2006-2783 State: PUBLISHED Published: 2006-06-02T19:00:00 Last Updated: 2024-08-07T18:06:25.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20709 - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/adviso
advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/297-3/ - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://secunia.com/advisories/21210 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secunia.com/advisories/20382 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.vupen.com/engli
cus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.vupen.com/english/advisories/2009/1522 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://secunia.com/advisories/21607 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://secunia.co
ries/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://secunia.com/advisories/35379 - https://usn.ubuntu.com/296-2/ - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - https://exchange.xforce.ibmcloud.com/vulner
y/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26852 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10772 - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://www.vupen.com/english/advisories/2008/2094/references - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http
glish/advisories/2008/2094/references - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - http://support.apple.com/kb/HT3613 - https://usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://www.mozilla.org/security/announce/2006/mfsa2006-42.html - http://secunia.com/advisories/22065 - http://secunia.com/advisories/31074
CVE ID: CVE-2006-2784 State: PUBLISHED Published: 2006-06-02T19:00:00 Last Updated: 2024-08-07T18:06:25.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the "Manual Install" button, then using nested javascript: URLs. NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site. Additional Analyst Notes: - C
rogresses to the point of installing malicious software from the attacker-controlled site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/297-3/ - https://usn.ubuntu.com/296-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9768 - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://secunia.com/advisories/21210 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.securityfocus.