Vulnerability in N/a

CVE-2006-1993

Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an ifram…

EPSS: 0.573 (98.2th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

20214 (x_refsource_SECUNIA, third-party-advisory)
19802 (x_refsource_SECUNIA, third-party-advisory)
ADV-2006-3748 (vdb-entry, x_refsource_VUPEN)
oval:org.mitre.oval:def:1790 (signature, x_refsource_OVAL, vdb-entry)
SSRT061145 (x_refsource_HP, vendor-advisory)
20019 (x_refsource_SECUNIA, third-party-advisory)
www.securident.com/vuln/ff.txt (x_refsource_MISC)
17671 (vdb-entry, x_refsource_BID)
GLSA-200605-06 (vendor-advisory, x_refsource_GENTOO)
firefox-iframe-contentwindowfocus-bo(25994) (vdb-entry, x_refsource_XF)