PT-2006-5897 · Mozilla · Firefox

Thor Larholm · Publicado 2006-10-03 · Atualizado 2024-08-07 · CVE-2006-5159

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox (affected versions not specified)

Description A stack-based buffer overflow issue in Mozilla Firefox allows remote attackers to potentially execute arbitrary code via unspecified vectors involving JavaScript. However, the severity of this issue has been disputed by the vendor and original researchers, who claim that the presented code does not result in remote code execution but rather causes a crash and consumes system resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-5159

Produtos afetados

Firefox

Referências · 10

• http://securityfocus.com/bid/20294 · Nota
• http://securityfocus.com/archive/1/447493/100/0/threaded · Nota
• http://securityfocus.com/bid/20282 · Nota
• http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon · Nota
• http://securitytracker.com/id?1016962 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29317 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5159 · Nota de Segurança
• http://securityfocus.com/archive/1/447497/100/0/threaded · Nota
• http://securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html · Nota
• http://securityreason.com/securityalert/1678 · Nota