CVE-2006-2783: XSS
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2783?
CVE-2006-2783 has been classified as a moderate severity vulnerability, allowing potential cross-site scripting attacks.
How do I fix CVE-2006-2783?
To fix CVE-2006-2783, update Mozilla Firefox or Thunderbird to version 1.5.0.4 or later.
What versions of software are affected by CVE-2006-2783?
CVE-2006-2783 affects Mozilla Firefox versions up to 1.5.0.3 and Mozilla Thunderbird versions up to 1.5.0.3.
What type of attack can be executed via CVE-2006-2783?
CVE-2006-2783 allows remote attackers to conduct cross-site scripting (XSS) attacks.
Can CVE-2006-2783 be exploited without user interaction?
Yes, CVE-2006-2783 can be exploited remotely without requiring user interaction.