Overview
A privilege escalation vulnerability exists in the Mozilla addSelectionListener method. This may allow a remote attacker to execute arbitrary code.
Description
addSelectionListener Web content can add a SelectionListener to the Selection object by using addSelectionListener method of the nsISelectionPrivate interface. This listener would be called when the user performs a "find" or "select all" command. |
Impact
By convincing a user to view a specially crafted HTML document (e.g., a web page, an HTML email message, or an HTML email attachment), an attacker may be able to execute arbitrary code with the privileges of the user. |
Solution
Apply an update |
|
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to the Mozilla Foundation Security Advisory for reporting this vulnerability, who in turn credit moz_bug_r_a4.
This document was written by Will Dormann.
Other Information
| CVE IDs: | CVE-2006-2777 |
| Severity Metric: | 18.36 |
| Date Public: | 2006-06-01 |
| Date First Published: | 2006-06-02 |
| Date Last Updated: | 2007-02-09 14:34 UTC |
| Document Revision: | 17 |