Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2006-68
HistoryDec 19, 2006 - 12:00 a.m.

Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1) — Mozilla

2006-12-1900:00:00
Mozilla Foundation
www.mozilla.org
24

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.799

Percentile

98.3%

JSON

As part of the Firefox 2.0.0.1 and 1.5.0.9 update releases we fixed several bugs to improve the stability of the product. Some of these were crashes that showed evidence of memory corruption and we presume that at least some of these could be exploited to run arbitrary code with enough effort.

Affected configurations

Vulners
Node
mozillafirefoxRange<1.5.0.9
OR
mozillafirefoxRange<2.0.0.1
OR
mozillaseamonkeyRange<1.0.7
OR
mozillathunderbirdRange<1.5.0.9
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
mozillathunderbird*cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

References

Related

securityvulns 1
debian 3
openvas 31
osv 3
nessus 38
ubuntu 4
ubuntucve 3
cert 3
veracode 2
cve 3
cvelist 3
nvd 3
debiancve 3
gentoo 3
redhat 3
fedora 3
oraclelinux 3
centos 4
suse 2
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2006-68
2006-12-20 00:00:00
debian
debian
[SECURITY] [DSA 1253-1] New Mozilla Firefox packages fix several vulnerabilities
2007-01-27 18:35:24
[SECURITY] [DSA 1258-1] New Mozilla Firefox packages fix several vulnerabilities
2007-02-07 07:36:56
[SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities
2007-03-10 19:12:34
openvas
openvas
Solaris Update for Mozilla 1.7 119115-35
2009-10-13 00:00:00
Solaris Update for Mozilla 1.7_x86 119116-35
2009-10-13 00:00:00
Debian: Security Advisory (DSA-1253-1)
2008-01-17 00:00:00
osv
osv
mozilla-thunderbird
2007-02-07 00:00:00
mozilla-firefox
2007-01-27 00:00:00
mozilla
2007-03-10 00:00:00
nessus
nessus
Debian DSA-1253-1 : mozilla-firefox - several vulnerabilities
2007-02-09 00:00:00
Debian DSA-1258-1 : mozilla-thunderbird - several vulnerabilities
2007-02-09 00:00:00
Debian DSA-1265-1 : mozilla - several vulnerabilities
2007-03-12 00:00:00
ubuntu
ubuntu
Firefox regression
2007-01-27 00:00:00
Firefox vulnerabilities
2007-01-03 00:00:00
Thunderbird vulnerabilities
2007-01-05 00:00:00
ubuntucve
ubuntucve
CVE-2006-6499
2006-12-20 00:00:00
CVE-2006-6498
2006-12-20 00:00:00
CVE-2006-6497
2006-12-20 00:00:00
cert
cert
Mozilla denial of service vulnerability
2007-01-09 00:00:00
Mozilla JavaScript Engine multiple memory corruption vulnerabilities
2007-01-18 00:00:00
Mozilla Layout Engine vulnerability
2006-12-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:12:22
Denial Of Service (DoS)
2020-04-10 00:12:21
cve
cve
CVE-2006-6498
2006-12-20 01:28:00
CVE-2006-6499
2006-12-20 01:28:00
CVE-2006-6497
2006-12-20 01:28:00
cvelist
cvelist
CVE-2006-6498
2006-12-20 01:00:00
CVE-2006-6499
2006-12-20 01:00:00
CVE-2006-6497
2006-12-20 01:00:00
nvd
nvd
CVE-2006-6498
2006-12-20 01:28:00
CVE-2006-6499
2006-12-20 01:28:00
CVE-2006-6497
2006-12-20 01:28:00
debiancve
debiancve
CVE-2006-6499
2006-12-20 01:28:00
CVE-2006-6498
2006-12-20 01:28:00
CVE-2006-6497
2006-12-20 01:28:00
gentoo
gentoo
SeaMonkey: Multiple vulnerabilities
2007-01-10 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2007-01-04 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2007-01-04 00:00:00
redhat
redhat
(RHSA-2006:0758) Critical: firefox security update
2006-12-19 00:00:00
(RHSA-2006:0759) Critical: seamonkey security update
2006-12-19 00:00:00
(RHSA-2006:0760) Critical: thunderbird security update
2006-12-19 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: firefox-1.5.0.9-1.fc5
2006-12-21 22:02:27
[SECURITY] Fedora Core 5 Update: firefox-1.5.0.9-1.fc5
2006-12-22 20:21:55
[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.9-2.fc5
2007-01-02 20:23:31
oraclelinux
oraclelinux
Critical firefox security update
2006-12-20 00:00:00
Critical thunderbird security update
2006-12-20 00:00:00
Critical seamonkey security update
2006-12-20 00:00:00
centos
centos
firefox security update
2006-12-23 11:43:06
devhelp, seamonkey security update
2006-12-20 15:44:06
seamonkey security update
2006-12-20 05:41:20
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird
2006-12-29 15:41:46
remote denial of service in mozilla
2007-01-12 14:08:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.799

Percentile

98.3%

JSON
Related for MFSA2006-68
securityvulns1debian3openvas31osv3nessus38ubuntu4ubuntucve3cert3veracode2cve3cvelist3nvd3debiancve3gentoo3redhat3fedora3oraclelinux3centos4suse2