CVE-2006-1736
Detail
Deferred
This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
Description
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
Vector:
(AV:N/AC:H/Au:N/C:N/I:P/A:N)
Evaluator Solution
Fixed in: Firefox 1.5
Firefox 1.0.8
SeaMonkey 1.0
Mozilla Suite 1.7.13
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected] .
URL
Source(s)
Tag(s)
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt
CVE, Inc., Red Hat
http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
CVE, Inc., Red Hat
http://secunia.com/advisories/19631
CVE, Inc., Red Hat
http://secunia.com/advisories/19721
CVE, Inc., Red Hat
http://secunia.com/advisories/19746
CVE, Inc., Red Hat
http://secunia.com/advisories/19759
CVE, Inc., Red Hat
http://secunia.com/advisories/19794
CVE, Inc., Red Hat
http://secunia.com/advisories/19852
CVE, Inc., Red Hat
http://secunia.com/advisories/19862
CVE, Inc., Red Hat
http://secunia.com/advisories/19863
CVE, Inc., Red Hat
http://secunia.com/advisories/19902
CVE, Inc., Red Hat
http://secunia.com/advisories/19941
CVE, Inc., Red Hat
http://secunia.com/advisories/21033
CVE, Inc., Red Hat
http://secunia.com/advisories/21622
CVE, Inc., Red Hat
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
CVE, Inc., Red Hat
http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
CVE, Inc., Red Hat
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
CVE, Inc., Red Hat
http://www.debian.org/security/2006/dsa-1044
CVE, Inc., Red Hat
http://www.debian.org/security/2006/dsa-1046
CVE, Inc., Red Hat
http://www.debian.org/security/2006/dsa-1051
CVE, Inc., Red Hat
http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml
CVE, Inc., Red Hat
http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:075
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:076
CVE, Inc., Red Hat
http://www.mozilla.org/security/announce/2006/mfsa2006-13.html
CVE, Inc., Red Hat
http://www.securityfocus.com/archive/1/438730/100/0/threaded
CVE, Inc., Red Hat
http://www.securityfocus.com/bid/17516
CVE, Inc., Red Hat
http://www.vupen.com/english/advisories/2006/1356
CVE, Inc., Red Hat
https://bugzilla.mozilla.org/show_bug.cgi?id=293527
CVE, Inc., Red Hat
https://exchange.xforce.ibmcloud.com/vulnerabilities/25814
CVE, Inc., Red Hat
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1548
CVE, Inc., Red Hat
https://usn.ubuntu.com/271-1/
CVE, Inc., Red Hat
https://usn.ubuntu.com/275-1/
CVE, Inc., Red Hat
Weakness Enumeration
CWE-ID
CWE Name
Source
NVD-CWE-Other
Other
NIST  
Change History
7 change records found show changes
CVE Modified by CVE 11/20/2024 7:09:37 PM
Action
Type
Old Value
New Value
Added
Reference
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt
Added
Reference
http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
Added
Reference
http://secunia.com/advisories/19631
Added
Reference
http://secunia.com/advisories/19721
Added
Reference
http://secunia.com/advisories/19746
Added
Reference
http://secunia.com/advisories/19759
Added
Reference
http://secunia.com/advisories/19794
Added
Reference
http://secunia.com/advisories/19852
Added
Reference
http://secunia.com/advisories/19862
Added
Reference
http://secunia.com/advisories/19863
Added
Reference
http://secunia.com/advisories/19902
Added
Reference
http://secunia.com/advisories/19941
Added
Reference
http://secunia.com/advisories/21033
Added
Reference
http://secunia.com/advisories/21622
Added
Reference
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
Added
Reference
http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
Added
Reference
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
Added
Reference
http://www.debian.org/security/2006/dsa-1044
Added
Reference
http://www.debian.org/security/2006/dsa-1046
Added
Reference
http://www.debian.org/security/2006/dsa-1051
Added
Reference
http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml
Added
Reference
http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:075
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:076
Added
Reference
http://www.mozilla.org/security/announce/2006/mfsa2006-13.html
Added
Reference
http://www.securityfocus.com/archive/1/438730/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/438730/100/0/threaded
Added
Reference
http://www.securityfocus.com/bid/17516
Added
Reference
http://www.vupen.com/english/advisories/2006/1356
Added
Reference
https://bugzilla.mozilla.org/show_bug.cgi?id=293527
Added
Reference
https://exchange.xforce.ibmcloud.com/vulnerabilities/25814
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1548
Added
Reference
https://usn.ubuntu.com/271-1/
Added
Reference
https://usn.ubuntu.com/275-1/
CVE Modified by Red Hat, Inc. 5/13/2024 9:35:53 PM
Action
Type
Old Value
New Value
CVE Modified by Red Hat, Inc. 10/18/2018 12:35:26 PM
Action
Type
Old Value
New Value
Added
Reference
http://www.securityfocus.com/archive/1/438730/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/438730/100/0/threaded [No Types Assigned]
CVE Modified by Red Hat, Inc. 10/03/2018 5:39:02 PM
Action
Type
Old Value
New Value
Added
Reference
https://usn.ubuntu.com/271-1/ [No Types Assigned]
Added
Reference
https://usn.ubuntu.com/275-1/ [No Types Assigned]
Removed
Reference
http://www.ubuntulinux.org/support/documentation/usn/usn-271-1 [No Types Assigned]
Removed
Reference
http://www.ubuntulinux.org/support/documentation/usn/usn-275-1 [No Types Assigned]
CVE Modified by Red Hat, Inc. 10/10/2017 9:30:49 PM
Action
Type
Old Value
New Value
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1548 [No Types Assigned]
Removed
Reference
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1548 [Tool Signature, US Government Resource]
CVE Modified by Red Hat, Inc. 7/19/2017 9:30:51 PM
Action
Type
Old Value
New Value
Added
Reference
https://exchange.xforce.ibmcloud.com/vulnerabilities/25814 [No Types Assigned]
Removed
Reference
http://xforce.iss.net/xforce/xfdb/25814 [No Types Assigned]
Initial CVE Analysis 4/14/2006 11:24:00 AM
Action
Type
Old Value
New Value
Quick Info
CVE Dictionary Entry: CVE-2006-1736 NVD
Published Date: 04/14/2006 NVD
Last Modified: 04/02/2025
Source: Red Hat, Inc.