CVE-2006-2538
IE Tab 1.0.9 for Firefox - Denial of Service via JavaScript in chrome:// URI
Title source: llmDescription
IE Tab 1.0.9 plugin for Mozilla Firefox 1.5.0.3 allows remote user-assisted attackers to cause a denial of service (application crash), possibly due to a null dereference, via certain Javascript, as demonstrated using a url parameter to the content/reloaded.html page in a chrome:// URI. Some third-party researchers claim that they are unable to reproduce this vulnerability.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/434280/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26540
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/434519/100/0/threaded
Scores
EPSS
0.0189
EPSS Percentile
77.3%
Details
Status
published
Products (2)
ie_tab/ie_tab
1.0.9
mozilla/firefox
1.5.0.3
Published
May 22, 2006
Tracked Since
Feb 18, 2026