Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-6500HistoryDec 20, 2006 - 1:28 a.m.
CVE-2006-6500
2006-12-2001:28:00
Debian Security Bug Tracker
security-tracker.debian.org
16
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.237
Percentile
96.6%
Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 130.0.1-1 | firefox_130.0.1-1_all.deb |
Related
cve
cve
CVE-2006-6500
2006-12-20 01:28:00
ubuntucve
ubuntucve
CVE-2006-6500
2006-12-20 00:00:00
mozilla
mozilla
CSS cursor image buffer overflow (Windows only) — Mozilla
2006-12-19 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2006-69
2006-12-20 00:00:00
cert
cert
cvelist
cvelist
CVE-2006-6500
2006-12-20 01:00:00
nvd
nvd
CVE-2006-6500
2006-12-20 01:28:00
openvas
openvas
Gentoo Security Advisory GLSA 200701-03 (mozilla-thunderbird)
2008-09-24 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:010 (mozilla-firefox)
2009-04-09 00:00:00
Mandriva Update for mozilla-thunderbird MDKSA-2007:011 (mozilla-thunderbird)
2009-04-09 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2007-01-04 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-01-10 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2007-01-04 00:00:00
nessus
nessus
GLSA-200701-03 : Mozilla Thunderbird: Multiple vulnerabilities
2007-01-08 00:00:00
Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:011)
2007-02-18 00:00:00
Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:010)
2007-02-18 00:00:00
suse
suse
remote denial of service in mozilla
2007-01-12 14:08:00
remote code execution in MozillaFirefox,MozillaThunderbird
2006-12-29 15:41:46
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.237
Percentile
96.6%
Related for DEBIANCVE:CVE-2006-6500