Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-4568

Fixed in a distro release EPSS 2%

Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.

Published 2006-09-15 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey

Distro releases

ReleasePackageFixed in
Debian 12thunderbird1.5.0.7-1
Debian 13thunderbird1.5.0.7-1
Debian 14thunderbird1.5.0.7-1
Debian 3.1mozilla2:1.7.8-1sarge7.3.1
Debian 3.1mozilla-firefox1.0.4-2sarge12
Debian 3.1mozilla-thunderbird1.0.2-2.sarge1.0.8c.1
Red Hat Enterprise Linux 3seamonkey0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-chat0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-debuginfo0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-devel0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-dom-inspector0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-js-debugger0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-mail0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-nspr0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-nspr-devel0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-nss0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-nss-devel0:1.0.5-0.1.el3
Red Hat Enterprise Linux 4devhelp0:0.10-0.4.el4
Red Hat Enterprise Linux 4devhelp-debuginfo0:0.10-0.4.el4
Red Hat Enterprise Linux 4devhelp-devel0:0.10-0.4.el4
Red Hat Enterprise Linux 4firefox0:1.5.0.7-0.1.el4
Red Hat Enterprise Linux 4firefox-debuginfo0:1.5.0.7-0.1.el4
Red Hat Enterprise Linux 4seamonkey0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-chat0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-debuginfo0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-devel0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-dom-inspector0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-js-debugger0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-mail0:1.0.5-0.1.el4