Firefox vulnerabilities

2006-11-2100:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.46

Percentile

97.5%

JSON

Releases

Ubuntu 6.06
Ubuntu 5.10

Details

USN-351-1 fixed a flaw in the verification of PKCS certificate
signatures. Ulrich Kuehn discovered a variant of the original attack
which the original fix did not cover. (CVE-2006-5462)

Various flaws have been reported that allow an attacker to execute
arbitrary code with user privileges by tricking the user into opening
a malicious web page containing JavaScript. (CVE-2006-5463,
CVE-2006-5464, CVE-2006-5747, CVE-2006-5748)

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchfirefox-dev< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchlibnss-dev< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchlibnss3< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchlibnspr-dev< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchlibnspr4< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06UNKNOWN
Ubuntu5.10noarchfirefox-dev< 1.5.dfsg+1.5.0.8-0ubuntu0.5.10UNKNOWN
Ubuntu5.10noarchfirefox< 1.5.dfsg+1.5.0.8-0ubuntu0.5.10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06	UNKNOWN
Ubuntu	6.06	noarch	firefox-dev	< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06	UNKNOWN
Ubuntu	6.06	noarch	libnss-dev	< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06	UNKNOWN
Ubuntu	6.06	noarch	libnss3	< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06	UNKNOWN
Ubuntu	6.06	noarch	libnspr-dev	< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06	UNKNOWN
Ubuntu	6.06	noarch	libnspr4	< 1.5.dfsg+1.5.0.8-0ubuntu0.6.06	UNKNOWN
Ubuntu	5.10	noarch	firefox-dev	< 1.5.dfsg+1.5.0.8-0ubuntu0.5.10	UNKNOWN
Ubuntu	5.10	noarch	firefox	< 1.5.dfsg+1.5.0.8-0ubuntu0.5.10	UNKNOWN