CVE-2006-0496
Status: ModifiedMedium (4.3)—💥 Exploit
Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earlier, and Netscape 8.1 and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property, which does not require that the style sheet have the same origin as the web page, as demonstrated by the compromise of a large number of LiveJournal accounts.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Base score: 4.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.67%
- Percentile among all scored CVEs: 85
- Score date: 10/14/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
💥 Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · Mozilla Firefox 1.0/1.5 XBL - MOZ-BINDING Property Cross-Domain Scripting (1/30/2006)
Affected technologies (2)
CWEs
- NVD-CWE-Other
References
- http://community.livejournal.com/lj_dev/708069.html
- http://marc.info/?l=full-disclosure&m=113847912709062&w=2
- http://securitytracker.com/id?1015553
- http://securitytracker.com/id?1015563
- http://www.davidpashley.com/cgi/pyblosxom.cgi/computing/livejournal-mozilla-bug.html
- http://www.osvdb.org/22924
- http://www.securityfocus.com/bid/16427
- http://www.vupen.com/english/advisories/2006/0403
- https://bugzilla.mozilla.org/show_bug.cgi?id=324253
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24427
- http://community.livejournal.com/lj_dev/708069.html
- http://marc.info/?l=full-disclosure&m=113847912709062&w=2
- http://securitytracker.com/id?1015553
- http://securitytracker.com/id?1015563
- http://www.davidpashley.com/cgi/pyblosxom.cgi/computing/livejournal-mozilla-bug.html
- http://www.osvdb.org/22924
- http://www.securityfocus.com/bid/16427
- http://www.vupen.com/english/advisories/2006/0403
- https://bugzilla.mozilla.org/show_bug.cgi?id=324253
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24427
Raw JSON (NVD)
Show
{
"id": "CVE-2006-0496",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-02-01T02:02:00.000",
"references": [
{
"url": "http://community.livejournal.com/lj_dev/708069.html",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=full-disclosure&m=113847912709062&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1015553",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1015563",
"source": "cve@mitre.org"
},
{
"url": "http://www.davidpashley.com/cgi/pyblosxom.cgi/computing/livejournal-mozilla-bug.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/22924",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/16427",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/0403",
"source": "cve@mitre.org"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=324253",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24427",
"source": "cve@mitre.org"
},
{
"url": "http://community.livejournal.com/lj_dev/708069.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=full-disclosure&m=113847912709062&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1015553",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1015563",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.davidpashley.com/cgi/pyblosxom.cgi/computing/livejournal-mozilla-bug.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/22924",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/16427",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/0403",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=324253",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24427",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earlier, and Netscape 8.1 and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property, which does not require that the style sheet have the same origin as the web page, as demonstrated by the compromise of a large number of LiveJournal accounts."
},
{
"lang": "es",
"value": "Vulnerabilidad de XSS en Mozilla 1.7.12 y posiblemente versiones anteriores, Mozilla Firefox 1.0.7 y posiblemente versiones anteriores y Netscape 8.1 y posiblemente versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de propiedad CSS (Cascading Style Sheets) -moz-binding, lo que no requiere que la hoja de estilos tenga el mismo origen que la página web, como es demostrado por el compromiso de un gran número de cuentas de LiveJournal."
}
],
"lastModified": "2026-06-16T22:20:43.293",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A545A77-2198-4685-A87F-E0F2DAECECF6"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7447185-7509-449D-8907-F30A42CF7EB5"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D093FD25-94C8-49B8-A452-438023BFB105"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FE7EA3B-3BF8-4696-9488-78506074D62D"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C883B45F-D28D-428E-AAF7-F93522A229DC"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E748A943-8A1E-4657-826C-EBE013E04864"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "655FA37C-DA33-4195-AEAF-5A5D40C5C245"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDD5B652-8474-4C00-9CDD-62B499045932"
},
{
"criteria": "cpe:2.3:a:mozilla:mozilla:1.7.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2BD8D89-4936-402C-973D-5F4B071806D5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}