CVE-2006-1942

no score yetEPSS 2.6%

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
Published: 2006-04-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

k-meleon_project:k-meleon
mozilla:firefox
netscape:navigator

References

http://secunia.com/advisories/19698
http://secunia.com/advisories/19988
http://secunia.com/advisories/20063
http://secunia.com/advisories/20376
http://secunia.com/advisories/21176

Check your stack JSON