CVE-2006-2785

Publication date 2 June 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting "Show only this frame" on a frame whose SRC attribute contains a Javascript URL.

Status

Package Ubuntu Release Status
midbrowser 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
firefox 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Fixed 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1
firefox-granparadiso 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
lightning-sunbird 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
mozilla-thunderbird 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
xulrunner 7.04 feisty
Fixed 1.8.0.5-4.2
6.10 edgy
Fixed 1.8.0.5-4.2
6.06 LTS dapper Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-323-1
    • mozilla vulnerabilities
    • 26 July 2006
    • USN-296-2
    • Firefox vulnerabilities
    • 25 July 2006
    • USN-296-1
    • firefox vulnerabilities
    • 9 June 2006

Other references