// For flags

CVE-2006-1942

 

Severity Score

4.3
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
High
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2006-04-20 CVE Reserved
  • 2006-04-20 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (28)
URL Tag Source
http://securitytracker.com/id?1016202 Vdb Entry
http://www.osvdb.org/24713 Vdb Entry
http://www.securityfocus.com/archive/1/431267/100/0/threaded Mailing List
http://www.securityfocus.com/archive/1/433138/100/0/threaded Mailing List
http://www.securityfocus.com/archive/1/433539/30/5070/threaded Mailing List
http://www.securityfocus.com/archive/1/435795/100/0/threaded Mailing List
http://www.securityfocus.com/bid/18228 Vdb Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=334341 X_refsource_confirm
https://exchange.xforce.ibmcloud.com/vulnerabilities/25925 Vdb Entry
URL Date SRC
URL Date SRC
http://www.gavinsharp.com/tmp/ImageVuln.html 2018-10-18
URL Date SRC
http://secunia.com/advisories/19698 2018-10-18
http://secunia.com/advisories/19988 2018-10-18
http://secunia.com/advisories/20063 2018-10-18
http://secunia.com/advisories/20376 2018-10-18
http://secunia.com/advisories/21176 2018-10-18
http://secunia.com/advisories/21183 2018-10-18
http://secunia.com/advisories/21324 2018-10-18
http://secunia.com/advisories/22066 2018-10-18
http://www.debian.org/security/2006/dsa-1118 2018-10-18
http://www.debian.org/security/2006/dsa-1120 2018-10-18
http://www.debian.org/security/2006/dsa-1134 2018-10-18
http://www.mozilla.org/security/announce/2006/mfsa2006-39.html 2018-10-18
http://www.networksecurity.fi/advisories/netscape-view-image.html 2018-10-18
http://www.novell.com/linux/security/advisories/2006_35_mozilla.html 2018-10-18
http://www.securityfocus.com/archive/1/446658/100/200/threaded 2018-10-18
http://www.vupen.com/english/advisories/2006/2106 2018-10-18
http://www.vupen.com/english/advisories/2006/3748 2018-10-18
http://www.vupen.com/english/advisories/2008/0083 2018-10-18
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
K-meleon Project
Search vendor "K-meleon Project"
 K-meleon
Search vendor "K-meleon Project" for product "K-meleon"
 0.9.13
Search vendor "K-meleon Project" for product "K-meleon" and version "0.9.13"
-
Affected
Mozilla
Search vendor "Mozilla"
 Firefox
Search vendor "Mozilla" for product "Firefox"
 1.5.0.2
Search vendor "Mozilla" for product "Firefox" and version "1.5.0.2"
-
Affected
Netscape
Search vendor "Netscape"
 Navigator
Search vendor "Netscape" for product "Navigator"
 7.2
Search vendor "Netscape" for product "Navigator" and version "7.2"
-
Affected
Netscape
Search vendor "Netscape"
 Navigator
Search vendor "Netscape" for product "Navigator"
 8.0.40
Search vendor "Netscape" for product "Navigator" and version "8.0.40"
-
Affected
Netscape
Search vendor "Netscape"
 Navigator
Search vendor "Netscape" for product "Navigator"
 8.1
Search vendor "Netscape" for product "Navigator" and version "8.1"
-
Affected