CVE-2006-0299: Medium severity Mozilla SeaMonkey vulnerability
The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin restrictions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0299?
CVE-2006-0299 is classified as a moderate severity vulnerability due to potential information leakage between cooperating domains.
How do I fix CVE-2006-0299?
To mitigate CVE-2006-0299, upgrade to Mozilla Firefox version 1.5.0.1 or later, Thunderbird 1.5, or SeaMonkey 1.0 or later.
Which versions of Mozilla software are affected by CVE-2006-0299?
CVE-2006-0299 affects Mozilla Firefox versions before 1.5.0.1, Thunderbird 1.5 when running Javascript in mail, and SeaMonkey before version 1.0.
What type of attack does CVE-2006-0299 facilitate?
CVE-2006-0299 can facilitate cross-domain information exchange attacks, violating the same origin policy.
Is CVE-2006-0299 present in beta versions of Mozilla products?
Yes, CVE-2006-0299 is present in the beta versions of Mozilla Firefox 1.5 and SeaMonkey 1.0.