Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-4569

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.

Published

2006-09-15T19:07:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 2.6 (LOW)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

4.9

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mozilla	firefox	≤ 1.5.0.6	Yes

References

http://secunia.com/advisories/21949 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21950 ([email protected])
http://secunia.com/advisories/22001 ([email protected])
http://secunia.com/advisories/22025 ([email protected])
http://secunia.com/advisories/22056 ([email protected])
http://secunia.com/advisories/22066 ([email protected])
http://secunia.com/advisories/22195 ([email protected])
http://secunia.com/advisories/22210 ([email protected])
http://secunia.com/advisories/22422 ([email protected])
http://secunia.com/advisories/24711 ([email protected])
http://security.gentoo.org/glsa/glsa-200609-19.xml ([email protected])
http://securitytracker.com/id?1016849 ([email protected])
http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:168 ([email protected])
http://www.mozilla.org/security/announce/2006/mfsa2006-62.html Vendor Advisory ([email protected])
http://www.novell.com/linux/security/advisories/2006_54_mozilla.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0675.html ([email protected])
http://www.securityfocus.com/archive/1/446140/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/20042 ([email protected])
http://www.ubuntu.com/usn/usn-351-1 ([email protected])
http://www.ubuntu.com/usn/usn-354-1 ([email protected])
http://www.vupen.com/english/advisories/2006/3748 ([email protected])
http://www.vupen.com/english/advisories/2007/1198 ([email protected])
http://www.vupen.com/english/advisories/2008/0083 ([email protected])
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 ([email protected])
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/28957 ([email protected])
https://issues.rpath.com/browse/RPL-640 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10650 ([email protected])
http://secunia.com/advisories/21949 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21950 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22001 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22025 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22056 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22066 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22195 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22210 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22422 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24711 (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200609-19.xml (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016849 (af854a3a-2127-422b-91ae-364da2661108)
http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:168 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/2006/mfsa2006-62.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_54_mozilla.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0675.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446140/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/20042 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-351-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-354-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3748 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1198 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0083 (af854a3a-2127-422b-91ae-364da2661108)
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 (af854a3a-2127-422b-91ae-364da2661108)
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/28957 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-640 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10650 (af854a3a-2127-422b-91ae-364da2661108)