PT-2006-1367 · Mozilla+1 · Firefox+1

Igor Bukanov · Publicado 2006-02-02 · Atualizado 2018-10-19 · CVE-2006-0293

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox version 1.5

Description The issue is related to the function allocation code in Firefox, specifically the js NewFunction in jsfun.c, which allows attackers to cause a denial of service and possibly execute arbitrary code. This is achieved through user-defined methods that trigger garbage collection in a way that operates on freed objects.

Recommendations For Firefox version 1.5, consider disabling the js NewFunction until a patch is available. Restrict the use of user-defined methods that could trigger garbage collection to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-0293

DSA-1046-1

DSA-1051-1

HPSBUX02122

Produtos afetados

Firefox

Hp-Ux

Referências · 57

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 · Aviso do Fabricante
• http://securityfocus.com/archive/1/438730/100/0/threaded · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1741 · Nota de Segurança
• http://securitytracker.com/id?1015665 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1727 · Nota de Segurança
• http://secunia.com/advisories/19862 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0293 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0296 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0749 · Nota de Segurança
• http://debian.org/security/2006/dsa-1051 · Aviso do Fabricante
• http://secunia.com/advisories/19941 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1740 · Nota de Segurança
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMDY3OTQ3Mg%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1737 · Nota de Segurança