Lucene search

K
mozillaMozilla FoundationMFSA2006-65
HistoryNov 07, 2006 - 12:00 a.m.

Crashes with evidence of memory corruption (rv:1.8.0.8) — Mozilla

2006-11-0700:00:00
Mozilla Foundation
www.mozilla.org
20

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.29

Percentile

96.9%

As part of the Firefox 1.5.0.8 release we fixed several bugs to improve the stability of the product. Some of these were crashes that showed evidence of memory corruption and we presume that at least some of these could be exploited to run arbitrary code with enough effort.

Affected configurations

Vulners
Node
mozillafirefoxRange<1.5.0.8
OR
mozillaseamonkeyRange<1.0.6
OR
mozillathunderbirdRange<1.5.0.8

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.29

Percentile

96.9%