HOME VULNERABILITIESCVE-2006-1942

MEDIUM

CVE-2006-1942

NVD-CWE-OtherPublished: April 20, 2006· Updated: Jun 16, 2026

5.1

CVSS v3.1

Official Description

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an "alternate web page."

Technical Analysis

CVE-2006-1942 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityHigh

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityP

IntegrityP

AvailabilityP

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected Vendors & Products

k-meleon_project1 product(s)

k-meleon

Mozilla1 product(s)

firefox

netscape1 product(s)

navigator

Source: NVD CPE · 5 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttp://www.gavinsharp.com/tmp/ImageVuln.html

PATCHhttp://www.gavinsharp.com/tmp/ImageVuln.html

ADVISORYhttp://secunia.com/advisories/19698

ADVISORYhttp://secunia.com/advisories/19988

ADVISORYhttp://secunia.com/advisories/20063

ADVISORYhttp://secunia.com/advisories/20376

ADVISORYhttp://secunia.com/advisories/21176

ADVISORYhttp://secunia.com/advisories/21183

ADVISORYhttp://secunia.com/advisories/21324

ADVISORYhttp://secunia.com/advisories/22066

ADVISORYhttp://www.mozilla.org/security/announce/2006/mfsa2006-39.html

ADVISORYhttp://www.networksecurity.fi/advisories/netscape-view-image.html

ADVISORYhttp://www.vupen.com/english/advisories/2006/2106

ADVISORYhttp://www.vupen.com/english/advisories/2006/3748

ADVISORYhttp://www.vupen.com/english/advisories/2008/0083

ADVISORYhttp://secunia.com/advisories/19698

ADVISORYhttp://secunia.com/advisories/19988

ADVISORYhttp://secunia.com/advisories/20063

ADVISORYhttp://secunia.com/advisories/20376

ADVISORYhttp://secunia.com/advisories/21176

ADVISORYhttp://secunia.com/advisories/21183

ADVISORYhttp://secunia.com/advisories/21324

ADVISORYhttp://secunia.com/advisories/22066

ADVISORYhttp://www.mozilla.org/security/announce/2006/mfsa2006-39.html

ADVISORYhttp://www.networksecurity.fi/advisories/netscape-view-image.html

ADVISORYhttp://www.vupen.com/english/advisories/2006/2106

ADVISORYhttp://www.vupen.com/english/advisories/2006/3748

ADVISORYhttp://www.vupen.com/english/advisories/2008/0083

All References (56)

→

http://secunia.com/advisories/19698Vendor Advisory

→

http://secunia.com/advisories/19988Vendor Advisory

→

http://secunia.com/advisories/20063Vendor Advisory

→

http://secunia.com/advisories/20376Vendor Advisory

→

http://secunia.com/advisories/21176Vendor Advisory

→

http://secunia.com/advisories/21183Vendor Advisory

→

http://secunia.com/advisories/21324Vendor Advisory

→

http://secunia.com/advisories/22066Vendor Advisory

→

http://securitytracker.com/id?1016202

→

http://www.debian.org/security/2006/dsa-1118

→

http://www.debian.org/security/2006/dsa-1120

→

http://www.debian.org/security/2006/dsa-1134

→

http://www.gavinsharp.com/tmp/ImageVuln.htmlPatch

→

http://www.mozilla.org/security/announce/2006/mfsa2006-39.htmlVendor Advisory

→

http://www.networksecurity.fi/advisories/netscape-view-image.htmlVendor Advisory

Quick Facts

CVE IDCVE-2006-1942

CVSS Score5.1 / 10

SeverityMEDIUM

WeaknessNVD-CWE-Other

CISA KEVNo

Affected3 vendor(s)

PublishedApr 20, 2006

Related CVEs (NVD-CWE-Other)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2006-1942 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2006-1942·NVD