PT-2006-4011 · Mozilla+1 · Firefox+3

Shutdown

·

Publicado

2006-07-27

·

Atualizado

2018-10-18

·

CVE-2006-3113

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.5 through 1.5.0.4 Thunderbird versions 1.5 through 1.5.0.4 SeaMonkey versions 1.0 through 1.0.2
Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events. This occurs because a timer object is deleted in a way that triggers memory corruption.
Recommendations For Mozilla Firefox versions 1.5 through 1.5.0.4, update to version 1.5.0.5 or later. For Thunderbird versions 1.5 through 1.5.0.4, update to version 1.5.0.5 or later. For SeaMonkey versions 1.0 through 1.0.2, update to version 1.0.3 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-3113
HPSBUX02153
RHSA-2006:0608
RHSA-2006:0609
RHSA-2006:0610
RHSA-2006:0611
RHSA-2006_0609
RHSA-2006_0610
RHSA-2006_0611

Produtos afetados

Firefox
Red Hat
Seamonkey
Thunderbird