PT-2006-1367 · Mozilla+1 · Firefox+1

Igor Bukanov · Published 2006-02-02 · Updated 2018-10-19 · CVE-2006-0293

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox version 1.5

Description The issue is related to the function allocation code in Firefox, specifically the js NewFunction in jsfun.c, which allows attackers to cause a denial of service and possibly execute arbitrary code. This is achieved through user-defined methods that trigger garbage collection in a way that operates on freed objects.

Recommendations For Firefox version 1.5, consider disabling the js NewFunction until a patch is available. Restrict the use of user-defined methods that could trigger garbage collection to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-0293

DSA-1046-1

DSA-1051-1

HPSBUX02122

Affected Products

Firefox

Hp-Ux

References · 57

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 · Vendor Advisory
• http://securityfocus.com/archive/1/438730/100/0/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1741 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1727 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0293 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0296 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0749 · Security Note
• http://debian.org/security/2006/dsa-1051 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1740 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1737 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-0293 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0292 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1733 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 · Vendor Advisory