Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-hbzv-jkrg-nudr |
| Summary | moz_bug_r_a4 reports that the fix for
MFSA 2006-72 in Firefox 1.5.0.9 and Firefox 2.0.0.1
introduced a regression that allows scripts from web content
to execute arbitrary code by setting the src
attribute of an IMG tag to a specially crafted
javascript: URI.The same regression also caused javascript: URIs in
IMG tags to be executed even if JavaScript
execution was disabled in the global preferences. This facet was
noted by moz_bug_r_a4 and reported independently by
Anbo Motohiko.Thunderbird is not affected by this flaw as it will not execute
javascript: URIs in IMG tags. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 9.0 - 10.0 |
| Exploitability | 0.5 |
| Weighted_severity | 9.0 |
| Risk_score | 4.5 |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-hbzv-jkrg-nudr |