Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-4561

Опубликовано: 06 сент. 2006
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*

EPSS

Процентиль: 74%
0.00855
Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
почти 19 лет назад

Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.

debian
почти 19 лет назад

Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary J ...

github
больше 3 лет назад

Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.

EPSS

Процентиль: 74%
0.00855
Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other