CVE-2006-0299
CVE-2006-0299
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin restrictions.
EPSS 2,0% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
thunderbird Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.5.0.2-1
Actualiza a 1.5.0.2-1
thunderbird Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.5.0.2-1
Actualiza a 1.5.0.2-1
thunderbird Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.5.0.2-1
Actualiza a 1.5.0.2-1
Fuentes originales
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1625
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24437
- http://secunia.com/advisories/18704
- http://www.vupen.com/english/advisories/2006/3749
- http://www.securityfocus.com/bid/16476
- http://www.vupen.com/english/advisories/2006/0413
- http://securitytracker.com/id?1015570
- http://secunia.com/advisories/18700
- http://www.securityfocus.com/archive/1/446657/100/200/threaded
- http://secunia.com/advisories/22065
- https://bugzilla.mozilla.org/show_bug.cgi?id=322312
- http://www.mozilla.org/security/announce/2006/mfsa2006-08.html
- https://nvd.nist.gov/vuln/detail/CVE-2006-0299