National Cyber Awareness System

Vulnerability Summary for CVE-2006-2894

Overview

Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2007-2664

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-1858

Hyperlink:https://issues.rpath.com/browse/RPL-1858

External Source: MISC

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=56236

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=56236

External Source: CONFIRM

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=370092

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=370092

External Source: MISC

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=290478

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=290478

External Source: VUPEN

Name: ADV-2008-0083

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2008/0083

External Source: VUPEN

Name: ADV-2007-3544

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/3544

External Source: VUPEN

Name: ADV-2006-2164

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/2164

External Source: VUPEN

Name: ADV-2006-2163

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/2163

External Source: VUPEN

Name: ADV-2006-2162

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/2162

External Source: VUPEN

Name: ADV-2006-2160

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/2160

External Source: UBUNTU

Name: USN-535-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-535-1

External Source: UBUNTU

Name: USN-536-1

Hyperlink:http://www.ubuntu.com/usn/usn-536-1

External Source: MISC

Name: http://www.thanhngan.org/fflinuxversion.html

Hyperlink:http://www.thanhngan.org/fflinuxversion.html

External Source: BID

Name: 18308

Hyperlink:http://www.securityfocus.com/bid/18308

External Source: BUGTRAQ

Name: 20071029 rPSA-2007-0225-2 firefox thunderbird

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/482932/100/200/threaded

External Source: BUGTRAQ

Name: 20071029 FLEA-2007-0062-1 firefox

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/482925/100/0/threaded

External Source: BUGTRAQ

Name: 20071026 rPSA-2007-0225-1 firefox

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/482876/100/200/threaded

External Source: SUSE

Name: SUSE-SA:2007:057

Hyperlink:http://www.novell.com/linux/security/advisories/2007_57_mozilla.html

External Source: CONFIRM

Name: http://www.mozilla.org/security/announce/2007/mfsa2007-32.html

Hyperlink:http://www.mozilla.org/security/announce/2007/mfsa2007-32.html

External Source: MANDRIVA

Name: MDKSA-2006:145

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

External Source: MANDRIVA

Name: MDKSA-2006:143

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

External Source: MANDRIVA

Name: MDKSA-2007:202

Hyperlink:http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202

External Source: MISC

Name: http://www.gnucitizen.org/blog/browser-focus-rip

Hyperlink:http://www.gnucitizen.org/blog/browser-focus-rip

External Source: CONFIRM

Name: http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html

Hyperlink:http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html

External Source: SUNALERT

Name: 201516

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1

External Source: SECTRACK

Name: 1018837

Hyperlink:http://securitytracker.com/id?1018837

External Source: SREASON

Name: 1059

Hyperlink:http://securityreason.com/securityalert/1059

External Source: SECUNIA

Name: 27414

Type: Advisory

Hyperlink:http://secunia.com/advisories/27414

External Source: SECUNIA

Name: 27403

Type: Advisory

Hyperlink:http://secunia.com/advisories/27403

External Source: SECUNIA

Name: 27387

Type: Advisory

Hyperlink:http://secunia.com/advisories/27387

External Source: SECUNIA

Name: 27383

Type: Advisory

Hyperlink:http://secunia.com/advisories/27383

External Source: SECUNIA

Name: 27335

Type: Advisory

Hyperlink:http://secunia.com/advisories/27335

External Source: SECUNIA

Name: 27298

Type: Advisory

Hyperlink:http://secunia.com/advisories/27298

External Source: SECUNIA

Name: 21532

Type: Advisory

Hyperlink:http://secunia.com/advisories/21532

External Source: SECUNIA

Name: 20472

Type: Advisory

Hyperlink:http://secunia.com/advisories/20472

External Source: SECUNIA

Name: 20470

Type: Advisory

Hyperlink:http://secunia.com/advisories/20470

External Source: SECUNIA

Name: 20467

Type: Advisory

Hyperlink:http://secunia.com/advisories/20467

External Source: SECUNIA

Name: 20442

Type: Advisory

Hyperlink:http://secunia.com/advisories/20442

External Source: FULLDISC

Name: 20070211 Firefox focus stealing vulnerability (possibly other browsers)

Hyperlink:http://lists.virus.org/full-disclosure-0702/msg00225.html

External Source: FULLDISC

Name: 20060605 file upload widgets in IE and Firefox have issues

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html

External Source: MISC

Name: http://lcamtuf.coredump.cx/focusbug/

Hyperlink:http://lcamtuf.coredump.cx/focusbug/

External Source: HP

Name: HPSBUX02153

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

External Source: HP

Name: HPSBUX02153

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

External Source: BUGTRAQ

Name: 20070212 Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)

Hyperlink:http://archives.neohapsis.com/archives/bugtraq/2007-02/0187.html

External Source: BUGTRAQ

Name: 20070211 Firefox focus stealing vulnerability (possibly other browsers)

Hyperlink:http://archives.neohapsis.com/archives/bugtraq/2007-02/0166.html