CVE-2006-6919

Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag…

published January 11, 2007

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing ">", which Sage modifies to close the img element before the malicious script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02188 · 82.3th percentile
Published
2007-01-11T23:00Z
EPSS history
Timeline
  • 11 JAN 23:00Z
    Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag…
    cvelistv5