CVE-2006-2775: High severity Mozilla Thunderbird vulnerability
Published Jun 2, 2006
·Updated
Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL.
Affected Software
47 affected components
Mozilla Thunderbird=0.6
Mozilla Firefox=0.8
Mozilla Thunderbird=0.7.2
Mozilla Firefox=1.5-beta2
Mozilla Thunderbird=0.3
Mozilla Thunderbird=0.2
Mozilla Thunderbird=1.0.7
Mozilla Firefox=1.0.2
Mozilla Firefox=1.5-beta1
Mozilla Firefox=1.5
Mozilla Firefox=0.9.1
Mozilla Firefox=1.0.4
Mozilla Firefox=1.0.7
Mozilla Firefox=0.10.1
Mozilla Thunderbird=1.0
Mozilla Firefox=0.9
Mozilla Thunderbird=1.0.1
Mozilla Thunderbird=1.5-beta2
Mozilla Thunderbird=1.0.2
Mozilla Firefox=1.0
Mozilla Thunderbird=1.5
Mozilla Firefox=1.0.1
Mozilla Firefox=1.0.6
Mozilla Thunderbird=0.5
Mozilla Thunderbird=1.0.4
Mozilla Thunderbird=0.9
Mozilla Thunderbird=1.0.3
Mozilla Firefox=1.5.0.2
Mozilla Firefox=1.0.3
Mozilla Thunderbird<=1.5.0.1
Mozilla Thunderbird=0.7.3
Mozilla Firefox=0.9.3
Mozilla Thunderbird=0.4
Mozilla Thunderbird=0.7
Mozilla Thunderbird=1.0.6
Mozilla Thunderbird=1.0.5-beta
Mozilla Firefox=0.9.2
Mozilla Firefox<=1.5.0.3
Mozilla Thunderbird=0.1
Mozilla Firefox=0.9-rc
Mozilla Thunderbird=0.7.1
Mozilla Thunderbird=1.0.5
Mozilla Thunderbird=0.8
Mozilla Firefox=1.5.0.1
Mozilla Firefox=0.10
Mozilla Firefox=1.0.5
Mozilla Firefox=1.0.6
Remediation
Patch Available
Patch Available
Event History
Jun 2, 2006
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2775?
CVE-2006-2775 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2006-2775?
To fix CVE-2006-2775, update Mozilla Firefox and Thunderbird to the latest versions.
3
What software is affected by CVE-2006-2775?
CVE-2006-2775 affects multiple versions of Mozilla Firefox and Thunderbird prior to 1.5.0.4.
4
What type of vulnerability is CVE-2006-2775?
CVE-2006-2775 is an issue related to improper URL association of XUL attributes.
5
Can CVE-2006-2775 be exploited remotely?
Yes, CVE-2006-2775 can be exploited by remote attackers to bypass restrictions.