CVE-2006-6919

Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing ">", which Sage modifies to close the img element before the malicious script.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://michaeldaw.org/md-hacks/rss-injection-in-sage-part-2/	Exploit
http://secunia.com/advisories/22809	Patch Vendor Advisory
http://www.securityfocus.com/archive/1/452010/100/0/threaded
http://www.vupen.com/english/advisories/2006/4426
https://exchange.xforce.ibmcloud.com/vulnerabilities/30179

Configurations

Configuration 1 (hide)

cpe:2.3:a:sage-mozdev:sage:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-01-11 23:28

Updated : 2024-02-28 11:01

NVD link : CVE-2006-6919

Mitre link : CVE-2006-6919

CVE.ORG link : CVE-2006-6919

JSON object : View

Products Affected

sage-mozdev

sage

CWE

NVD-CWE-Other

{"id": "CVE-2006-6919", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-01-11T23:28:00.000", "references": [{"url": "http://michaeldaw.org/md-hacks/rss-injection-in-sage-part-2/", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/22809", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/452010/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/4426", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30179", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing \">\", which Sage modifies to close the img element before the malicious script."}, {"lang": "es", "value": "Extensi\u00f3n Sage de Firefox 1.3.8 y versiones anteriores permite a atacantes remotos ejecutar c\u00f3digo JavaScript de su elecci\u00f3n en el contexto local mediante una entrada RSS con una etiqueta img conteniendo el scirpt seguido por un extra \">\" final, que Sage modifica para cerrar el elemento img antes del script maligno."}], "lastModified": "2018-10-16T16:29:05.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sage-mozdev:sage:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D1840C6-87E8-4AAE-BBF5-DD99AC342A58", "versionEndIncluding": "1.3.8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}