CVE-2006-4561

First published: Wed Sep 06 2006(Updated: )

Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.

Credit: cve@mitre.org cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/references
• agent/softwarecombine
• agent/first-publish-date
• collector/nvd-historical
• agent/software-canonical-lookup-request
• collector/nvd-index
• agent/weakness
• agent/severity
• agent/description
• agent/event
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/last-modified-date
• agent/author
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/mozilla
• canonical/mozilla firefox
• version/mozilla firefox/1.5.0.6