Debian Security Bug TrackerDEBIANCVE:CVE-2006-2779CVE-2006-2779
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
99.8%
Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) “Content-implemented tree views,” (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 1.5.dfsg+1.5.0.4-1 | firefox_1.5.dfsg+1.5.0.4-1_all.deb |
| Debian | 12 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |
| Debian | 11 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |
| Debian | 999 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |
| Debian | 13 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
99.8%