PT-2006-2781 · Mozilla+2 · Firefox+2

Bob Clary · Publicado 2006-04-14 · Atualizado 2018-10-18 · CVE-2006-1790

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 1.0.7

Description The issue allows remote attackers to cause a denial of service, potentially leading to a crash, and possibly execute arbitrary code. This is achieved through the InstallTrigger.install method, resulting in memory corruption.

Recommendations For Mozilla Firefox version 1.0.7, consider disabling the InstallTrigger.install method as a temporary workaround until a patch is available.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2006-1790

DSA-1046-1

DSA-1051-1

HPSBUX02122

RHSA-2006:0328

RHSA-2006:0329

RHSA-2006:0330

RHSA-2006_0328

RHSA-2006_0329

RHSA-2006_0330

Produtos afetados

Hp-Ux

Firefox

Red Hat

Referências · 109

• https://access.redhat.com/security/cve/CVE-2006-1727 · Nota
• http://securityfocus.com/archive/1/436338/100/0/threaded · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1736 · Nota de Segurança
• http://redhat.com/archives/fedora-announce-list/2006-April/msg00153.html · Aviso do Fabricante
• https://usn.ubuntu.com/275-1 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2006-0329.html · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1044 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-1742 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1733 · Nota de Segurança
• http://secunia.com/advisories/21033 · Nota
• http://gentoo.org/security/en/glsa/glsa-200604-12.xml · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0748 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2006-0749 · Nota
• http://securityfocus.com/archive/1/426347 · Nota