CVE-2006-4569
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the...
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
Exploit likelihood
What each source reports
NVD Score used
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
- Record
CVE-2006-4569- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
- Record
CVE-2006-4569- Updated
- 2026-11-02
EUVDEUVD-2006-4557 No score
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
- Record
EUVD-2006-4557- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9m24-j378-4w43 No score
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the...
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
- Record
GHSA-9m24-j378-4w43- Updated
- 2026-11-02
OSV No score
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
- Record
CVE-2006-4569- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4569 No score
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
- Record
DEBIAN-CVE-2006-4569- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 |
before 1.5.0.7-1 | 1.5.0.7-1 |
thunderbirdDebian:13 |
before 1.5.0.7-1 | 1.5.0.7-1 |
thunderbirdDebian:14 |
before 1.5.0.7-1 | 1.5.0.7-1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4569 is a low vulnerability (CVSS 2.6) in Mozilla Firefox, published September 15, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. Fixed in thunderbird 1.5.0.7-1.
References
vupen.com/english/advisories/2006/3748
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10650
secunia.com/advisories/22195
mozilla.org/security/announce/2006/mfsa2006-62.html
securitytracker.com/id?1016849
Show 60 moreShow less
ubuntu.com/usn/usn-351-1
mandriva.com/security/advisories?name=MDKSA-2006:168
support.avaya.com/elmodocs2/security/ASA-2006-224.htm
exchange.xforce.ibmcloud.com/vulnerabilities/28957
security.gentoo.org/glsa/glsa-200609-19.xml
www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742
redhat.com/support/errata/RHSA-2006-0675.html
securityfocus.com/bid/20042
novell.com/linux/security/advisories/2006_54_mozilla.html
issues.rpath.com/browse/RPL-640
nvd.nist.gov/vuln/detail/CVE-2006-4569
github.com/advisories/GHSA-9m24-j378-4w43
security-tracker.debian.org/tracker/CVE-2006-4569
access.redhat.com/errata/RHSA-2006:0675
bugzilla.redhat.com/show_bug.cgi?id=206428
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0675.json
cve.org/CVERecord?id=CVE-2006-4253