CVE-2006-6503: XSS
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6503?
CVE-2006-6503 is considered a moderate vulnerability as it allows attackers to bypass cross-site scripting protection.
How do I fix CVE-2006-6503?
To fix CVE-2006-6503, upgrade to Mozilla Firefox version 2.0.0.1 or later, SeaMonkey 1.0.7 or later, and Thunderbird 1.5.0.9 or later.
Which software is affected by CVE-2006-6503?
CVE-2006-6503 affects Mozilla Firefox 2.x before 2.0.0.1, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and specific versions of Debian and Ubuntu Linux.
What type of vulnerability is CVE-2006-6503?
CVE-2006-6503 is a cross-site scripting (XSS) vulnerability that allows remote attackers to exploit web applications.
Can CVE-2006-6503 be exploited remotely?
Yes, CVE-2006-6503 can be exploited remotely by attackers who manipulate the src attribute of an IMG element.