CVE:CVE-2006-2057
CNNVD:CNNVD-200604-518
Mozilla Firefox 1.0.6中存在参数注入漏洞。这使得用户辅助远程攻击者可以借助于电子邮件协议：模式处理器中的双引号字符修改传递到被调用的邮件客户端的命令行参数，如以任意文件名作为附件启动微软Outlook。
solution:Upgrade avant_force avant_browser to a higher version than 10.1_build_17,and avoid the version 10.1_build_17; Upgrade microsoft ie to a higher version than 6.0:sp2,and avoid the version 6.0:sp2; Upgrade microsoft outlook to a higher version than 2003:sp1,and avoid the version 2003:sp1; Upgrade mozilla firefox to a higher version than 1.0.6,and avoid the version 1.0.6