First published: Fri Apr 14 2006(Updated: )
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview".
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Mozilla Suite | <1.7.13 | |
Mozilla Thunderbird | >=1.0<1.0.8 | |
Mozilla SeaMonkey | <1.0.1 | |
Mozilla Firefox | >=1.5<1.5.0.2 | |
Mozilla Firefox | >=1.0<1.0.8 | |
Mozilla Thunderbird | >=1.5<1.5.0.2 | |
Ubuntu | =4.10 | |
Ubuntu | =5.04 | |
Ubuntu | =5.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-1727 is classified as a moderate severity vulnerability that allows remote attackers to gain chrome privileges.
To fix CVE-2006-1727, you should update your Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version available.
CVE-2006-1727 affects Mozilla Firefox versions before 1.5.0.2, Thunderbird versions before 1.5, Mozilla Suite versions before 1.7.13, and SeaMonkey versions before 1.0.1.
Yes, CVE-2006-1727 can be exploited via malicious web pages that utilize XBL scripts with the 'Print Preview' feature.
Yes, patches for CVE-2006-1727 are included in the versions released after the vulnerable ones, specifically starting from Firefox 1.5.0.2 and onwards.