PT-2006-3695 · Mozilla+1 · Firefox+2

Paul Nickerson

·

Publicado

2006-06-02

·

Atualizado

2018-10-18

·

CVE-2006-2776

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 1.5.0.4 Mozilla Thunderbird versions prior to 1.5.0.4
Description The issue allows remote attackers to execute code at a higher privilege than intended due to certain privileged UI code calling content-defined setters on an object prototype.
Recommendations For Mozilla Firefox versions prior to 1.5.0.4, update to version 1.5.0.4 or later. For Mozilla Thunderbird versions prior to 1.5.0.4, update to version 1.5.0.4 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-2776
DSA-1118
DSA-1120
DSA-1134-1
HPSBUX02153
RHSA-2006:0578
RHSA-2006:0609
RHSA-2006:0610
RHSA-2006:0611
RHSA-2006_0609
RHSA-2006_0610
RHSA-2006_0611

Produtos afetados

Firefox
Thunderbird
Red Hat