PT-2006-2781 · Mozilla+2 · Firefox+2

Bob Clary · Published 2006-04-14 · Updated 2018-10-18 · CVE-2006-1790

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 1.0.7

Description The issue allows remote attackers to cause a denial of service, potentially leading to a crash, and possibly execute arbitrary code. This is achieved through the InstallTrigger.install method, resulting in memory corruption.

Recommendations For Mozilla Firefox version 1.0.7, consider disabling the InstallTrigger.install method as a temporary workaround until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-1790

DSA-1046-1

DSA-1051-1

HPSBUX02122

RHSA-2006:0328

RHSA-2006:0329

RHSA-2006:0330

RHSA-2006_0328

RHSA-2006_0329

RHSA-2006_0330

Affected Products

Hp-Ux

Firefox

Red Hat

References · 109

• http://securityfocus.com/archive/1/436338/100/0/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1736 · Security Note
• http://redhat.com/archives/fedora-announce-list/2006-April/msg00153.html · Vendor Advisory
• https://usn.ubuntu.com/275-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0329.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1044 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1733 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200604-12.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0748 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728 · Security Note
• http://mozilla.org/security/announce/2006/mfsa2006-11.html · Vendor Advisory
• https://usn.ubuntu.com/271-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-1790 · Vendor Advisory
• http://secunia.com/advisories/19759 · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt · Vendor Advisory