Title: Mozilla Firefox IMG Element Crafted file:// URL Arbitrary Local File Access

Unknown or Incomplete

• Security Tracker: 1016202
• Bugtraq ID: 18228
• Secunia Advisory ID: 19698 19988 20063 20376 20382 20394 21176 21183 21324 22065 22066
• CVE ID: 2006-1942 (see also: NVD)
• SCIP VulDB ID: 2174 2277
• VUPEN Advisory: ADV-2006-2106
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0358.html
  http://archives.neohapsis.com/archives/bugtraq/2006-05/0119.html
  http://archives.neohapsis.com/archives/bugtraq/2006-05/0183.html
  http://archives.neohapsis.com/archives/bugtraq/2006-05/0186.html
  http://archives.neohapsis.com/archives/bugtraq/2008-01/0085.html
• Other Advisory URL: http://www.gavinsharp.com/tmp/ImageVuln.html
  http://www.gavinsharp.com/tmp/ImageVuln.html
  http://www.gavinsharp.com/tmp/ImageVuln2.html
  http://www.networksecurity.fi/advisories/netscape-view-image.html
  http://www.us.debian.org/security/2006/dsa-1118
  http://www.us.debian.org/security/2006/dsa-1120
  http://www.us.debian.org/security/2006/dsa-1134
  https://bugzilla.mozilla.org/show_bug.cgi?id=334341
• Vendor Specific Advisory URL: http://www.mozilla.org/security/announce/2006/mfsa2006-39.html
• Vendor Specific News/Changelog Entry: https://bugzilla.mozilla.org/show_bug.cgi?id=334341

Unknown or Incomplete