CVE-2006-6987

CVE-2006-6987 describes a cross-domain vulnerability in FineBrowser Freeware 3.2.2. This flaw allows remote attackers to bypass same-origin policies and access restricted information from other domains. The vulnerability, similar to CVE-2006-3280, leverages an object tag with a manipulated data parameter and Location HTTP header to expose content via the outerHTML attribute. Rated with a CVSS score of 7.8 (High), this vulnerability presents a significant risk due to its network-based attack vector and low attack complexity, potentially leading to complete confidentiality compromise. There is no authentication required for exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.