CVE-2006-1725

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-04-14 · updated 2026-06-16
Weakness: CWE-264

Description

Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code.

Affected products

Mozilla Firefox: from 1.5 before 1.5.0.2 — fixed in 1.5.0.2
Mozilla Seamonkey: before 1.0.1 — fixed in 1.0.1

How to fix

Upgrade to a fixed version: Mozilla Firefox 1.5.0.2; Mozilla Seamonkey 1.0.1. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/19631
http://secunia.com/advisories/19649
http://secunia.com/advisories/22066
http://www.mozilla.org/security/announce/2006/mfsa2006-29.html
http://www.securityfocus.com/archive/1/446658/100/200/threaded
http://www.securityfocus.com/bid/17516
http://www.vupen.com/english/advisories/2006/1356
http://www.vupen.com/english/advisories/2006/3748
http://www.vupen.com/english/advisories/2008/0083
https://bugzilla.mozilla.org/show_bug.cgi?id=327014
https://exchange.xforce.ibmcloud.com/vulnerabilities/25827
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471

Get alerted when CVE-2006-1725 or the next vulnerability affects your stack