PT-2006-4663 · Mozilla+1 · Firefox+3

H. D. Moore

·

Publicado

2006-07-27

·

Atualizado

2018-10-17

·

CVE-2006-3803

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.5 through 1.5.0.4 Thunderbird versions 1.5 through 1.5.0.4 SeaMonkey versions 1.0 through 1.0.2
Description A race condition exists in the JavaScript garbage collection, potentially allowing remote attackers to execute arbitrary code. This occurs when the garbage collector deletes a temporary variable while it is still being used during the creation of a new Function object.
Recommendations For Mozilla Firefox versions 1.5 through 1.5.0.4, update to version 1.5.0.5 or later. For Thunderbird versions 1.5 through 1.5.0.4, update to version 1.5.0.5 or later. For SeaMonkey versions 1.0 through 1.0.2, update to version 1.0.3 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-3803
HPSBUX02153
RHSA-2006:0608
RHSA-2006:0609
RHSA-2006:0610
RHSA-2006:0611
RHSA-2006_0609
RHSA-2006_0610
RHSA-2006_0611

Produtos afetados

Firefox
Red Hat
Seamonkey
Thunderbird