PT-2006-4543 · Mozilla+1 · Seamonkey+2

Thilo Girmann

·

Publicado

2006-07-27

·

Atualizado

2018-10-18

·

CVE-2006-3677

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.5 through 1.5.0.4 SeaMonkey versions prior to 1.0.3
Description The issue allows remote attackers to execute arbitrary code by changing certain properties of the window.navigator object that are accessed when Java starts up, which causes a crash that leads to code execution.
Recommendations For Mozilla Firefox versions 1.5 through 1.5.0.4, update to version 1.5.0.5 or later. For SeaMonkey versions prior to 1.0.3, update to version 1.0.3 or later.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2006-3677
HPSBUX02153
RHSA-2006:0608
RHSA-2006:0609
RHSA-2006:0610
RHSA-2006:0611
RHSA-2006_0609
RHSA-2006_0610
RHSA-2006_0611

Produtos afetados

Firefox
Red Hat
Seamonkey