CVE-2006-6971: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Mozilla Firefox 2.0, possibly only when running on Windows, allows remote attackers to bypass the Phishing Protection mechanism by representing an IP address in (1) dotted-hex, (2) dotted-octal, (3) single decimal integer, (4) single hex integer, or (5) single octal integer format, which is not captured by the blacklist filter.

Affected products

• Mozilla Firefox: version 2.0.0.1 only

Published 2007-02-07. Last modified 2026-06-16.