FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-1736

This CVE name corresponds to:

Entered	Topic
2006-04-16	mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-1736 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-1736
Phase	Assigned(20060412)

Description

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.

References

Source	Reference
CONFIRM	http://www.mozilla.org/security/announce/2006/mfsa2006-13.html
MISC	https://bugzilla.mozilla.org/show_bug.cgi?id=293527
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
DEBIAN	DSA-1044
DEBIAN	DSA-1046
DEBIAN	DSA-1051
GENTOO	GLSA-200604-12
GENTOO	GLSA-200604-18
HP	HPSBUX02122
HP	SSRT061158
MANDRIVA	MDKSA-2006:075
MANDRIVA	MDKSA-2006:076
SCO	SCOSA-2006.26
SUNALERT	102550
SUNALERT	228526
SUSE	SUSE-SA:2006:021
UBUNTU	USN-275-1
UBUNTU	USN-271-1
BID	17516
VUPEN	ADV-2006-1356
OVAL	oval:org.mitre.oval:def:1548
SECUNIA	19631
SECUNIA	19759
SECUNIA	19794
SECUNIA	19852
SECUNIA	19862
SECUNIA	19863
SECUNIA	19902
SECUNIA	19941
SECUNIA	19721
SECUNIA	19746
SECUNIA	21033
SECUNIA	21622
XF	mozilla-saveimageas-ext-spoofing(25814)