CVE-2006-4569

Firefox < 1.5.0.6 - Cross-Site Scripting via Popup Blocker Context

Title source: llm
STIX 2.1

Description

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.

References (28)

Core 28
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0675.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:168
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3748
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10650
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22195
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016849
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21950
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-351-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22025
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22056
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22210
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24711
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0083
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28957
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1198
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200609-19.xml
Various Sources vendor-advisory x_refsource_hp
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20042
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22001
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/446140/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22066
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21949
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_54_mozilla.html
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-640
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-354-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22422

Scores

EPSS 0.0213
EPSS Percentile 79.9%

Details

Status published
Products (1)
mozilla/firefox < 1.5.0.6
Published Sep 15, 2006
Tracked Since Feb 18, 2026