Description
Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code.
Metrics
CVSS 2.0 2.6/10
AV:N/AC:H/Au:N/C:N/I:P/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/19631Third Party Advisory
- http://secunia.com/advisories/19649Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/22066Third Party Advisory
- http://www.mozilla.org/security/announce/2006/mfsa2006-29.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
- http://www.securityfocus.com/bid/17516Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/1356Permissions Required, Third Party Advisory
- http://www.vupen.com/english/advisories/2006/3748Permissions Required, Third Party Advisory
- http://www.vupen.com/english/advisories/2008/0083Permissions Required, Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=327014Exploit, Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25827Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471Third Party Advisory
- http://secunia.com/advisories/19631Third Party Advisory
- http://secunia.com/advisories/19649Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/22066Third Party Advisory
- http://www.mozilla.org/security/announce/2006/mfsa2006-29.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
- http://www.securityfocus.com/bid/17516Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/1356Permissions Required, Third Party Advisory
- http://www.vupen.com/english/advisories/2006/3748Permissions Required, Third Party Advisory
- http://www.vupen.com/english/advisories/2008/0083Permissions Required, Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=327014Exploit, Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25827Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471Third Party Advisory
Timeline
- Published
- Apr 14, 2006
- Last modified
- Jun 16, 2026
- NVD status
- Modified