Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-398-2
HistoryJan 03, 2007 - 12:00 a.m.

Firefox vulnerabilities

2007-01-0300:00:00
ubuntu.com
40

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.921

Percentile

99.0%

JSON

Releases

  • Ubuntu 6.06
  • Ubuntu 5.10

Details

USN-398-1 fixed vulnerabilities in Firefox 2.0. This update provides
the corresponding updates for Firefox 1.5.

Various flaws have been reported that allow an attacker to execute
arbitrary code with user privileges by tricking the user into opening
a malicious web page containing JavaScript or SVG. (CVE-2006-6497,
CVE-2006-6498, CVE-2006-6499, CVE-2006-6501, CVE-2006-6502,
CVE-2006-6504)

Various flaws have been reported that allow an attacker to bypass
Firefox’s internal XSS protections by tricking the user into opening a
malicious web page containing JavaScript. (CVE-2006-6503)

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.9-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchfirefox-dev< 1.5.dfsg+1.5.0.9-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchlibnss-dev< 1.5.dfsg+1.5.0.9-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchlibnss3< 1.5.dfsg+1.5.0.9-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchlibnspr-dev< 1.5.dfsg+1.5.0.9-0ubuntu0.6.06UNKNOWN
Ubuntu6.06noarchlibnspr4< 1.5.dfsg+1.5.0.9-0ubuntu0.6.06UNKNOWN
Ubuntu5.10noarchfirefox-dev< 1.5.dfsg+1.5.0.9-0ubuntu0.5.10UNKNOWN
Ubuntu5.10noarchfirefox< 1.5.dfsg+1.5.0.9-0ubuntu0.5.10UNKNOWN

Related

openvas 31
ubuntu 3
nessus 38
debian 3
osv 3
redhat 3
fedora 3
oraclelinux 3
centos 4
gentoo 3
mozilla 5
securityvulns 6
suse 2
ubuntucve 7
cert 7
veracode 6
cve 7
cvelist 7
nvd 7
debiancve 7
zdi 1
checkpoint_advisories 1
openvas
openvas
Ubuntu Update for firefox vulnerabilities USN-398-2
2009-03-23 00:00:00
Ubuntu Update for firefox regression USN-398-4
2009-03-23 00:00:00
Ubuntu: Security Advisory (USN-398-2)
2009-03-23 00:00:00
ubuntu
ubuntu
Firefox regression
2007-01-27 00:00:00
Firefox vulnerabilities
2007-01-03 00:00:00
Thunderbird vulnerabilities
2007-01-05 00:00:00
nessus
nessus
Ubuntu 5.10 / 6.06 LTS : firefox regression (USN-398-4)
2007-11-10 00:00:00
Ubuntu 5.10 / 6.06 LTS : firefox vulnerabilities (USN-398-2)
2007-11-10 00:00:00
RHEL 4 : firefox (RHSA-2006:0758)
2006-12-30 00:00:00
debian
debian
[SECURITY] [DSA 1253-1] New Mozilla Firefox packages fix several vulnerabilities
2007-01-27 18:35:24
[SECURITY] [DSA 1258-1] New Mozilla Firefox packages fix several vulnerabilities
2007-02-07 07:36:56
[SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities
2007-03-10 19:12:34
osv
osv
mozilla-thunderbird
2007-02-07 00:00:00
mozilla-firefox
2007-01-27 00:00:00
mozilla
2007-03-10 00:00:00
redhat
redhat
(RHSA-2006:0758) Critical: firefox security update
2006-12-19 00:00:00
(RHSA-2006:0759) Critical: seamonkey security update
2006-12-19 00:00:00
(RHSA-2006:0760) Critical: thunderbird security update
2006-12-19 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: firefox-1.5.0.9-1.fc5
2006-12-21 22:02:27
[SECURITY] Fedora Core 5 Update: firefox-1.5.0.9-1.fc5
2006-12-22 20:21:55
[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.9-2.fc5
2007-01-02 20:23:31
oraclelinux
oraclelinux
Critical firefox security update
2006-12-20 00:00:00
Critical thunderbird security update
2006-12-20 00:00:00
Critical seamonkey security update
2006-12-20 00:00:00
centos
centos
firefox security update
2006-12-23 11:43:06
devhelp, seamonkey security update
2006-12-20 15:44:06
seamonkey security update
2006-12-20 05:41:20
gentoo
gentoo
SeaMonkey: Multiple vulnerabilities
2007-01-10 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2007-01-04 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2007-01-04 00:00:00
mozilla
mozilla
Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1) — Mozilla
2006-12-19 00:00:00
Privilege escalation using watch point — Mozilla
2006-12-19 00:00:00
XSS by setting img.src to javascript: URI — Mozilla
2006-12-19 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2006-68
2006-12-20 00:00:00
Mozilla Foundation Security Advisory 2006-70
2006-12-20 00:00:00
[Full-disclosure] ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability
2006-12-20 00:00:00
suse
suse
remote denial of service in mozilla
2007-01-12 14:08:00
remote code execution in MozillaFirefox,MozillaThunderbird
2006-12-29 15:41:46
ubuntucve
ubuntucve
CVE-2006-6499
2006-12-20 00:00:00
CVE-2006-6498
2006-12-20 00:00:00
CVE-2006-6503
2006-12-20 00:00:00
cert
cert
Mozilla denial of service vulnerability
2007-01-09 00:00:00
Mozilla JavaScript Engine multiple memory corruption vulnerabilities
2007-01-18 00:00:00
Mozilla products vulnerable to privilege escalation via a JavaScript watch() function
2007-01-18 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:12:22
Denial Of Service (DoS)
2020-04-10 00:12:21
Remote Code Execution (RCE)
2020-04-10 00:12:24
cve
cve
CVE-2006-6498
2006-12-20 01:28:00
CVE-2006-6499
2006-12-20 01:28:00
CVE-2006-6501
2006-12-20 01:28:00
cvelist
cvelist
CVE-2006-6498
2006-12-20 01:00:00
CVE-2006-6499
2006-12-20 01:00:00
CVE-2006-6501
2006-12-20 01:00:00
nvd
nvd
CVE-2006-6498
2006-12-20 01:28:00
CVE-2006-6499
2006-12-20 01:28:00
CVE-2006-6497
2006-12-20 01:28:00
debiancve
debiancve
CVE-2006-6501
2006-12-20 01:28:00
CVE-2006-6499
2006-12-20 01:28:00
CVE-2006-6503
2006-12-20 01:28:00
zdi
zdi
Mozilla Firefox SVG Processing Remote Code Execution Vulnerability
2006-12-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Products Frame Comment Objects Manipulation Memory Corruption (CVE-2006-6504)
2010-06-21 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.921

Percentile

99.0%

JSON
Related for USN-398-2
openvas31ubuntu3nessus38debian3osv3redhat3fedora3oraclelinux3centos4gentoo3mozilla5securityvulns6suse2ubuntucve7cert7veracode6cve7cvelist7nvd7debiancve7zdi1checkpoint_advisories1