CVE-2006-4569

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-15 · updated 2026-06-16

Description

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.

Affected products

Mozilla Firefox: through 1.5.0.6

References

http://secunia.com/advisories/21949
http://secunia.com/advisories/21950
http://secunia.com/advisories/22001
http://secunia.com/advisories/22025
http://secunia.com/advisories/22056
http://secunia.com/advisories/22066
http://secunia.com/advisories/22195
http://secunia.com/advisories/22210
http://secunia.com/advisories/22422
http://secunia.com/advisories/24711
http://security.gentoo.org/glsa/glsa-200609-19.xml
http://securitytracker.com/id?1016849

Get alerted when CVE-2006-4569 or the next vulnerability affects your stack