CVE-2006-4569

Name	CVE-2006-4569
Description	The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
firefox (PTS)	sid	107.0-1	fixed
thunderbird (PTS)	buster	1:91.12.0-1~deb10u1	fixed
	buster (security)	1:102.5.0-1~deb10u1	fixed
	bullseye	1:91.13.0-1~deb11u1	fixed
	bullseye (security)	1:102.5.0-1~deb11u1	fixed
	bookworm, sid	1:102.5.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency
firefox	source	(unstable)	1.5.dfsg+1.5.0.7-1	low
mozilla-firefox	source	sarge	(not affected)
thunderbird	source	(unstable)	1.5.0.7-1
xulrunner	source	(unstable)	1.8.0.7-1	low

MFSA-2006-62
[sarge] - mozilla-firefox <not-affected> (Regression only affecting 1.5)