CVE-2006-2613: Infoleak

Published May 26, 2006

Updated

Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other versions and products, allows remote user-assisted attackers to obtain information such as the installation path by causing exceptions to be thrown and checking the message contents.

Affected Software

6 affected components

Mozilla Firefox=1.5.0.1

Mozilla Firefox=1.5.0.2

Mozilla Firefox=1.5.0.3

Mozilla Mozilla Suite=1.7.13

Netscape Navigator=7.2

Netscape Navigator=8.1

Remediation

Patch Available

https://bugzilla.mozilla.org/show_bug.cgi?id=267645

Event History

May 26, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-2613?

CVE-2006-2613 is classified as moderate in severity due to its potential to expose sensitive information.

How do I fix CVE-2006-2613?

To mitigate CVE-2006-2613, you should update to the latest version of affected applications, such as Mozilla Firefox or Netscape.

Which versions are affected by CVE-2006-2613?

CVE-2006-2613 affects Mozilla Suite 1.7.13, Firefox versions up to 1.5.0.3, and Netscape versions 7.2 and 8.1.

What kind of information can be exposed by CVE-2006-2613?

CVE-2006-2613 can allow attackers to obtain information such as the installation path of the affected software.

Is remote exploitation possible with CVE-2006-2613?

Yes, CVE-2006-2613 can be exploited by remote user-assisted attackers through specially crafted content.