CVE-2006-3352: Medium severity Mozilla Firefox vulnerability
DISPUTED Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object. NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3352?
CVE-2006-3352 is classified as a moderate severity vulnerability due to its potential impact on data confidentiality.
How do I fix CVE-2006-3352?
To mitigate CVE-2006-3352, it is advised to upgrade Mozilla Firefox to a patched version that addresses this vulnerability.
What does CVE-2006-3352 affect?
CVE-2006-3352 affects multiple versions of Mozilla Firefox, specifically versions from 0.8 up to 1.5.3.
Is CVE-2006-3352 an active exploitation risk?
While CVE-2006-3352 has been disputed regarding its potential for active exploitation, it is still important to address it.
Who discovered CVE-2006-3352?
CVE-2006-3352 was reported in the community and has undergone dispute over its implications and actual impact.