Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2006-2788
HistoryJun 02, 2006 - 9:06 p.m.

CVE-2006-2788

2006-06-0221:06:00
CWE-119
redhat
web.nvd.nist.gov
58
cve-2006-2788
double free vulnerability
getrawder function
nsix509cert
firefox
remote code execution
denial of service

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.254

Percentile

96.7%

JSON

Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.

Affected configurations

Nvd
Node
mozillafirefoxMatch0.8
OR
mozillafirefoxMatch0.9
OR
mozillafirefoxMatch0.9rc
OR
mozillafirefoxMatch0.9.1
OR
mozillafirefoxMatch0.9.2
OR
mozillafirefoxMatch0.9.3
OR
mozillafirefoxMatch0.10
OR
mozillafirefoxMatch0.10.1
OR
mozillafirefoxMatch1.0
OR
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillafirefoxMatch1.0.3
OR
mozillafirefoxMatch1.0.4
OR
mozillafirefoxMatch1.0.5
OR
mozillafirefoxMatch1.0.6
OR
mozillafirefoxMatch1.0.6linux
OR
mozillafirefoxMatch1.0.7
OR
mozillafirefoxMatch1.5
OR
mozillafirefoxMatch1.5beta1
OR
mozillafirefoxMatch1.5beta2
OR
mozillafirefoxMatch1.5.0.1
OR
mozillafirefoxMatch1.5.0.2
OR
mozillafirefoxMatch1.5.0.3
OR
mozillafirefoxMatchpreview_release
VendorProductVersionCPE
mozillafirefox0.8cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*
mozillafirefox0.9cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*
mozillafirefox0.9cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*
mozillafirefox0.9.1cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*
mozillafirefox0.9.2cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*
mozillafirefox0.9.3cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*
mozillafirefox0.10cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*
mozillafirefox0.10.1cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*
mozillafirefox1.0cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*
mozillafirefox1.0.1cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

References

Related

cvelist 1
nvd 1
ubuntucve 1
debiancve 1
prion 1
nessus 17
openvas 11
debian 3
osv 3
redhat 5
ubuntu 3
oraclelinux 2
centos 4
cvelist
cvelist
CVE-2006-2788
2006-06-02 21:00:00
nvd
nvd
CVE-2006-2788
2006-06-02 21:06:00
ubuntucve
ubuntucve
CVE-2006-2788
2006-06-02 00:00:00
debiancve
debiancve
CVE-2006-2788
2006-06-02 21:06:00
prion
prion
Double free
2006-06-02 21:06:00
nessus
nessus
Debian DSA-1210-1 : mozilla-firefox - several vulnerabilities
2006-11-20 00:00:00
Debian DSA-1191-1 : mozilla-thunderbird - several vulnerabilities
2006-10-14 00:00:00
Debian DSA-1192-1 : mozilla - several vulnerabilities
2006-10-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 1210-1 (mozilla-firefox)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1210)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1192-1)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1210-1] New Mozilla Firefox packages fix several vulnerabilities
2006-11-14 08:02:35
[SECURITY] [DSA 1191-1] New Mozilla Thunderbird packages fix several vulnerabilities
2006-10-05 10:14:30
[SECURITY] [DSA 1192-1] New Mozilla packages fix several vulnerabilities
2006-10-06 12:11:15
osv
osv
mozilla-firefox
2006-11-14 00:00:00
mozilla
2006-10-06 00:00:00
mozilla-thunderbird
2006-10-05 00:00:00
redhat
redhat
(RHSA-2006:0578) seamonkey security update (was mozilla)
2006-07-20 00:00:00
(RHSA-2006:0610) firefox security update
2006-07-28 00:00:00
(RHSA-2006:0611) thunderbird security update
2006-07-28 00:00:00
ubuntu
ubuntu
Mozilla vulnerabilities
2006-10-10 00:00:00
Firefox vulnerabilities
2006-07-25 00:00:00
firefox vulnerabilities
2006-06-09 00:00:00
oraclelinux
oraclelinux
Critical firefox security update
2006-12-07 00:00:00
Critical thunderbird security update
2006-12-07 00:00:00
centos
centos
thunderbird security update
2006-07-29 11:51:27
firefox security update
2006-07-29 11:51:13
seamonkey security update
2006-09-05 00:01:38

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.254

Percentile

96.7%

JSON
Related for CVE-2006-2788
cvelist1nvd1ubuntucve1debiancve1prion1nessus17openvas11debian3osv3redhat5ubuntu3oraclelinux2centos4