CVE-2006-1942 - CVE House
Back to Database
Status published Medium CVE-2006-1942

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape...

Vulnerability Description

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-1942

Credits & Attribution

No credits recorded in the NVD database.

References

More from k-meleon project

View All →
CVE-2009-0689
Array index error in the (1) dtoa implementation in dtoa.c...
Medium 6.8
CVE-2006-4253
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote...
High 7.6
CVE-2005-4134
Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before...
Medium 5

Affected Vendor

k-meleon project

View all reports →

Affected Software

k-meleon, firefox, navigator
Vulnerable Versions:
0.9.13, 1.5.0.2, 7.2, 8.0.40, 8.1

Timeline

Official Publish: April 20th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.