CVE-2006-1942

Published Apr 20, 2006 CVSS 2.0 · 5.1 Medium EPSS 2.6% KEV · Not listed
Description
Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1118-1 New Mozilla packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1120-1 New Mozilla Firefox packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1134-1 New Mozilla Thunderbird packages fix several vulnerabilities
EUVD EUVD EUVD-2006-1942 Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 5:27 PM
Reserved
Apr 20, 2006, 12:00 AM
Status
Modified
Published
Apr 20, 2006, 10:02 PM
Modified
Jun 16, 2026, 10:23 PM