CVE-2006-2785

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting "Show only this frame" on a frame whose SRC attribute contains a Javascript URL.

🔗 References (78)

• cve@mitrehttp://rhn.redhat.com/errata/RHSA-2006-0609.html
• cve@mitrehttp://secunia.com/advisories/20376
• cve@mitrehttp://secunia.com/advisories/20561
• cve@mitrehttp://secunia.com/advisories/21134
• cve@mitrehttp://secunia.com/advisories/21176
• cve@mitrehttp://secunia.com/advisories/21178
• cve@mitrehttp://secunia.com/advisories/21183
• cve@mitrehttp://secunia.com/advisories/21188
• cve@mitrehttp://secunia.com/advisories/21269
• cve@mitrehttp://secunia.com/advisories/21270
• cve@mitrehttp://secunia.com/advisories/21324
• cve@mitrehttp://secunia.com/advisories/21336
• cve@mitrehttp://secunia.com/advisories/21532
• cve@mitrehttp://secunia.com/advisories/21631
• cve@mitrehttp://secunia.com/advisories/22066