Upstream information

CVE-2006-4569 at MITRE

Description

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having low severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 2.6
Vector AV:N/AC:H/Au:N/C:N/I:P/A:N
Access Vector Network
Access Complexity High
Authentication None
Confidentiality Impact None
Integrity Impact Partial
Availability Impact None
SUSE Bugzilla entry: 205678 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE LINUX 10.0
SUSE LINUX 9.2
SUSE LINUX 9.3
  • MozillaFirefox >= 1.5.0.7-1.1
  • MozillaFirefox-translations >= 1.5.0.7-1.1
SUSE LINUX 10.1
  • MozillaFirefox >= 1.5.0.7-1.2
  • MozillaFirefox-translations >= 1.5.0.7-1.2
Novell Linux Desktop 9 for x86
Novell Linux Desktop 9 for x86_64
  • MozillaFirefox >= 1.5.0.7-1.2
  • MozillaFirefox-translations >= 1.5.0.7-1.2
 sles10.s390x
sled10.x86
sles10.ia64
ZYPP Patch Nr: 2088