Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-6499HistoryDec 20, 2006 - 1:28 a.m.
CVE-2006-6499
2006-12-2001:28:00
Debian Security Bug Tracker
security-tracker.debian.org
20
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.02
Percentile
88.9%
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 45.0-1 | firefox_45.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2006-6499
2006-12-20 00:00:00
cert
cert
Mozilla denial of service vulnerability
2007-01-09 00:00:00
cvelist
cvelist
CVE-2006-6499
2006-12-20 01:00:00
cve
cve
CVE-2006-6499
2006-12-20 01:28:00
nvd
nvd
CVE-2006-6499
2006-12-20 01:28:00
mozilla
mozilla
Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1) — Mozilla
2006-12-19 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2006-68
2006-12-20 00:00:00
osv
osv
openvas
openvas
Solaris Update for Mozilla 1.7_x86 119116-35
2009-10-13 00:00:00
Debian: Security Advisory (DSA-1253-1)
2008-01-17 00:00:00
Solaris Update for Mozilla 1.7 119115-35
2009-10-13 00:00:00
debian
debian
nessus
nessus
Debian DSA-1253-1 : mozilla-firefox - several vulnerabilities
2007-02-09 00:00:00
Debian DSA-1258-1 : mozilla-thunderbird - several vulnerabilities
2007-02-09 00:00:00
Debian DSA-1265-1 : mozilla - several vulnerabilities
2007-03-12 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2007-01-03 00:00:00
Firefox regression
2007-01-27 00:00:00
Thunderbird vulnerabilities
2007-01-05 00:00:00
gentoo
gentoo
SeaMonkey: Multiple vulnerabilities
2007-01-10 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2007-01-04 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird
2006-12-29 15:41:46
remote denial of service in mozilla
2007-01-12 14:08:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.02
Percentile
88.9%
Related for DEBIANCVE:CVE-2006-6499