Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2006-64
HistorySep 14, 2006 - 12:00 a.m.

Crashes with evidence of memory corruption (rv:1.8.0.7) — Mozilla

2006-09-1400:00:00
Mozilla Foundation
www.mozilla.org
19

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.498

Percentile

97.5%

JSON

As part of the Firefox 1.5.0.7 release we fixed several bugs to improve the stability of the product. Some of these were crashes that showed evidence of memory corruption and we presume that at least some of these could be exploited to run arbitrary code with enough effort.

Affected configurations

Vulners
Node
mozillafirefoxRange<1.5.0.7
OR
mozillaseamonkeyRange<1.0.5
OR
mozillathunderbirdRange<1.5.0.7

References

Related

ubuntucve 1
veracode 1
cve 1
debiancve 1
cvelist 1
nvd 1
debian 3
openvas 18
osv 3
nessus 31
gentoo 3
centos 4
oraclelinux 3
redhat 3
ubuntu 4
freebsd 1
suse 1
cert 2
ubuntucve
ubuntucve
CVE-2006-4571
2006-09-15 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-04-10 00:13:14
cve
cve
CVE-2006-4571
2006-09-15 19:07:00
debiancve
debiancve
CVE-2006-4571
2006-09-15 19:07:00
cvelist
cvelist
CVE-2006-4571
2006-09-15 19:00:00
nvd
nvd
CVE-2006-4571
2006-09-15 19:07:00
debian
debian
[SECURITY] [DSA 1210-1] New Mozilla Firefox packages fix several vulnerabilities
2006-11-14 08:02:35
[SECURITY] [DSA 1191-1] New Mozilla Thunderbird packages fix several vulnerabilities
2006-10-05 10:14:30
[SECURITY] [DSA 1192-1] New Mozilla packages fix several vulnerabilities
2006-10-06 12:11:15
openvas
openvas
Debian: Security Advisory (DSA-1210)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200610-04 (seamonkey)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200610-04 (seamonkey)
2008-09-24 00:00:00
osv
osv
mozilla-firefox
2006-11-14 00:00:00
mozilla-thunderbird
2006-10-05 00:00:00
mozilla
2006-10-06 00:00:00
nessus
nessus
Fedora Core 5 : thunderbird-1.5.0.7-1.fc5 (2006-977)
2007-01-17 00:00:00
GLSA-200610-04 : SeaMonkey: Multiple vulnerabilities
2006-10-20 00:00:00
Debian DSA-1210-1 : mozilla-firefox - several vulnerabilities
2006-11-20 00:00:00
gentoo
gentoo
Seamonkey: Multiple vulnerabilities
2006-10-16 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2006-10-04 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2006-09-28 00:00:00
centos
centos
devhelp, seamonkey security update
2006-09-15 14:57:11
seamonkey security update
2006-09-17 23:20:54
thunderbird security update
2006-09-15 14:57:35
oraclelinux
oraclelinux
Critical thunderbird security update
2006-12-07 00:00:00
Critical seamonkey security update
2006-12-07 00:00:00
Critical firefox security update
2006-12-07 00:00:00
redhat
redhat
(RHSA-2006:0676) seamonkey security update
2006-09-15 00:00:00
(RHSA-2006:0677) thunderbird security update
2006-09-15 00:00:00
(RHSA-2006:0675) firefox security update
2006-09-15 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2006-09-25 00:00:00
firefox vulnerabilities
2006-09-23 00:00:00
Mozilla vulnerabilities
2006-10-10 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2006-09-14 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2006-09-22 13:02:47
cert
cert
OpenSSL SSLv2 client code fails to properly check for NULL
2006-09-28 00:00:00
OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow
2006-09-28 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.498

Percentile

97.5%

JSON
Related for MFSA2006-64
ubuntucve1veracode1cve1debiancve1cvelist1nvd1debian3openvas18osv3nessus31gentoo3centos4oraclelinux3redhat3ubuntu4freebsd1suse1cert2