CVE-2006-2894: mozilla firefox Improper Input Validation

Modified

Published 07-06-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-2894 is a medium (CVSS 4.0) Improper Input Validation vulnerability in mozilla firefox. EPSS estimates a 9.83% chance of exploitation in the next 30 days, higher than 95.5% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 06-06-2006)

Source freshness unavailable

How is this decided?

CVSS score

4.0/10

010

Medium · v2.0 (NVD)

EPSS score

9.83%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 4

DSA-1392-1 DSA-1401-1 DTSA-69-1 DTSA-80-1

Timeline

07-06-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.

CVSS metrics

1 score · 1 source · 1 version

v2.04.0

EPSS trend

Probability

9.83%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 9.83% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

referenceUnverified
Exploit Reference (lists.grok.org.uk)
Maturity: unknown
exploit-databaseremotelinuxVerified
Mozilla Firefox 1.x - JavaScript Key Filtering
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Internet Explorer 5.5/6.0/7.0 - JavaScript Key Filtering
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Mozilla3 products

firefox≤ 2.0.0.8 | 1.5.0.4
mozilla_suite1.7.13
seamonkey≤ 1.1.4 | 1.0.2

Netscape1 product

navigator≤ 8.1

2 vendors · 4 products

References

45 links

www.securityfocus.com/archive/1/482876/100/200/threadedMailing ListX Refsource BUGTRAQ
www.mandriva.com/security/advisories?name=MDKSA-2006:145Vendor AdvisoryX Refsource MANDRIVA
lcamtuf.coredump.cx/focusbug/X Refsource MISC
secunia.com/advisories/27414Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/482925/100/0/threadedMailing ListX Refsource BUGTRAQ
issues.rpath.com/browse/RPL-1858X Refsource CONFIRM
www.vupen.com/english/advisories/2006/2163VDB EntryX Refsource VUPENVendor Advisory
archives.neohapsis.com/archives/bugtraq/2007-02/0166.htmlMailing ListX Refsource BUGTRAQ
securityreason.com/securityalert/1059Third Party AdvisoryX Refsource SREASON
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742Vendor AdvisoryX Refsource HP

Show all 45 references

secunia.com/advisories/27298Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1018837VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2007/3544VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/20470Third Party AdvisoryX Refsource SECUNIAVendor Advisory
usn.ubuntu.com/535-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/20472Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/20467Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2006/2160VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/27383Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2007_57_mozilla.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/21532Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/27387Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2006/2164VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/bid/18308VDB EntryX Refsource BID
secunia.com/advisories/27403Third Party AdvisoryX Refsource SECUNIAVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=56236X Refsource MISC
archives.neohapsis.com/archives/bugtraq/2007-02/0187.htmlMailing ListX Refsource BUGTRAQ
lists.virus.org/full-disclosure-0702/msg00225.htmlMailing ListX Refsource FULLDISC
www.vupen.com/english/advisories/2006/2162VDB EntryX Refsource VUPENVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=290478X Refsource MISC
www.mozilla.org/security/announce/2007/mfsa2007-32.htmlX Refsource CONFIRM
lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.htmlMailing ListX Refsource FULLDISCExploit
www.thanhngan.org/fflinuxversion.htmlX Refsource MISC
www.mandriva.com/en/security/advisories?name=MDKSA-2007:202Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/27335Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.htmlVendor AdvisoryX Refsource FEDORA
www.mandriva.com/security/advisories?name=MDKSA-2006:143Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/20442Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.gnucitizen.org/blog/browser-focus-ripX Refsource MISC
support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.htmlX Refsource CONFIRM
sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1Vendor AdvisoryX Refsource SUNALERT
www.securityfocus.com/archive/1/482932/100/200/threadedMailing ListX Refsource BUGTRAQ
bugzilla.mozilla.org/show_bug.cgi?id=370092X Refsource CONFIRM
www.ubuntu.com/usn/usn-536-1Vendor AdvisoryX Refsource UBUNTU