CVE-2006-1650: Medium severity mozilla firefox vulnerability
Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was unable to replicate this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1650?
The severity of CVE-2006-1650 is considered medium due to its potential to facilitate phishing attacks.
How does CVE-2006-1650 allow address bar spoofing?
CVE-2006-1650 allows address bar spoofing by reopening a window to a malicious Flash application while redirecting to a trusted URL.
What versions of Firefox are affected by CVE-2006-1650?
CVE-2006-1650 specifically affects Firefox version 1.5.0.1.
What are the potential risks of CVE-2006-1650?
The risks of CVE-2006-1650 include users being misled into providing personal information to phishing sites.
Is there a fix for CVE-2006-1650?
Patching or upgrading Firefox to a version beyond 1.5.0.1 resolves the CVE-2006-1650 vulnerability.