{"id":"CVE-2006-2894","aliases":["DSA-1392-1","DSA-1401-1","DTSA-69-1","DTSA-80-1","EUVD-2006-2891","GHSA-gjhw-j84v-5cmv"],"status":"published","title":"Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and...","description":"Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09825,"percentile":0.95587,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2006-06-07T10:00:00Z","modified":"2026-06-16T22:25:59Z","exploits":[{"source":"exploitdb","id":"EDB-27986","title":"Microsoft Internet Explorer 5.5/6.0/7.0 - JavaScript Key Filtering","type":"remote","platform":"windows","date":"2006-06-06","verified":true,"url":"https://www.exploit-db.com/exploits/27986"},{"source":"exploitdb","id":"EDB-27987","title":"Mozilla Firefox 1.x - JavaScript Key Filtering","type":"remote","platform":"linux","date":"2006-06-06","verified":true,"url":"https://www.exploit-db.com/exploits/27987"}],"affected":[{"source":"osv","ecosystem":"Debian:4.0","package":"xulrunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.14~pre071019b-0etch1"}]}],"versions":["1.8.0.11-2","1.8.0.11-3","1.8.0.11-4","1.8.0.11-4.1","1.8.0.12-0etch1","1.8.0.13~pre070720-0etch1","1.8.0.13~pre070720-0etch2","1.8.0.13~pre070720-0etch3","1.8.0.13~pre070720-0etch3+lenny1"],"bundled":9},{"source":"osv","ecosystem":"Debian:4.0","package":"iceape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11~pre071022-0etch1"}]}],"versions":["1.0.10~pre070720-0etch1","1.0.10~pre070720-0etch1+lenny1","1.0.10~pre070720-0etch3","1.0.10~pre070720-0etch3+lenny1","1.0.8-4","1.0.9-0etch1"],"bundled":9},{"source":"osv","ecosystem":"Debian:5.0","package":"xulrunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.14~pre071019b-0lenny1"}]}],"bundled":9},{"source":"osv","ecosystem":"Debian:5.0","package":"iceape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11~pre071022-0etch1+lenny1"}]}],"bundled":9}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"mozilla_suite"},{"vendor":"mozilla","product":"seamonkey"},{"vendor":"netscape","product":"navigator"}],"references":[{"url":"http://www.securityfocus.com/archive/1/482876/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://lcamtuf.coredump.cx/focusbug/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://secunia.com/advisories/27414","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/482925/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://issues.rpath.com/browse/RPL-1858","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/2163","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2007-02/0166.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://securityreason.com/securityalert/1059","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/27298","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1018837","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/3544","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20470","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://usn.ubuntu.com/535-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://secunia.com/advisories/20472","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20467","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/2160","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/27383","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2007_57_mozilla.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/21532","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/27387","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/2164","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/18308","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/27403","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=56236","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2007-02/0187.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://lists.virus.org/full-disclosure-0702/msg00225.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/2162","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=290478","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.mozilla.org/security/announce/2007/mfsa2007-32.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit"]},{"url":"http://www.thanhngan.org/fflinuxversion.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/27335","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/20442","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.gnucitizen.org/blog/browser-focus-rip","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/482932/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=370092","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.ubuntu.com/usn/usn-536-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2894"},{"url":"https://usn.ubuntu.com/535-1"},{"url":"http://lcamtuf.coredump.cx/focusbug"},{"url":"https://github.com/advisories/GHSA-gjhw-j84v-5cmv"}],"sources":{"cve":[{"id":"CVE-2006-2894","description":"Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.","status":"published","published":"2006-06-07T10:00:00Z","modified":"2024-08-07T18:06:27.19Z","updated_at":"2026-11-02T14:33:48.871799Z"}],"euvd":[{"id":"EUVD-2006-2891","description":"Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.","status":"published","published":"2006-06-07T10:00:00Z","modified":"2024-08-07T18:06:27Z","updated_at":"2026-11-03T01:15:58.732208Z"}],"ghsa":[{"id":"GHSA-gjhw-j84v-5cmv","title":"Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and...","description":"Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.","status":"published","published":"2022-05-01T07:03:42Z","modified":"2025-04-03T04:35:13Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:00:46.038216Z"}],"nvd":[{"id":"CVE-2006-2894","description":"Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.","status":"published","published":"2006-06-07T10:02:00Z","modified":"2026-06-16T22:25:59.32Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:03.750605Z"}],"osv":[{"id":"DSA-1392-1","title":"xulrunner - several vulnerabilities","status":"published","published":"2007-10-20T00:00:00Z","modified":"2026-03-09T01:01:30.239237Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DSA-1401-1","title":"iceape - several vulnerabilities","status":"published","published":"2007-11-05T00:00:00Z","modified":"2026-03-09T01:01:39.178279Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DTSA-69-1","title":"xulrunner - several vulnerabilities","status":"published","published":"2007-10-23T00:00:00Z","modified":"2026-03-09T01:01:45.305264Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"DTSA-80-1","title":"iceape - several vulnerabilities","status":"published","published":"2007-11-10T00:00:00Z","modified":"2026-03-09T01:02:02.872051Z","updated_at":"2026-11-02T15:46:18.716547Z"}]}}