PT-2006-3698 · Mozilla+1 · Firefox+2

Georgi Guninski · Published 2006-06-02 · Updated 2018-10-18 · CVE-2006-2779

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 1.5.0.4 Mozilla Thunderbird versions prior to 1.5.0.4

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code. This can be achieved through various means, including nested <option> tags in a select tag, a DOMNodeRemoved mutation event, Content-implemented tree views, BoxObjects, the XBL implementation, or an iframe that attempts to remove itself, leading to memory corruption.

Recommendations For Mozilla Firefox versions prior to 1.5.0.4, update to version 1.5.0.4 or later to resolve the issue. For Mozilla Thunderbird versions prior to 1.5.0.4, update to version 1.5.0.4 or later to resolve the issue.

Exploit

Fix

DoS

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-2779

DSA-1118

DSA-1120

DSA-1134-1

DSA-1159

DSA-1160

HPSBUX02153

RHSA-2006:0578

RHSA-2006:0609

RHSA-2006:0610

RHSA-2006:0611

RHSA-2006_0609

RHSA-2006_0610

RHSA-2006_0611

Affected Products

Firefox

Thunderbird

Red Hat

References · 232

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/mozilla_navigatorjava.rb · Exploit
• http://debian.org/security/2006/dsa-1160 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3737 · Security Note
• http://secunia.com/advisories/21532 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6589 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1729 · Security Note
• http://securityfocus.com/archive/1/446657/100/200/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6506 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5464 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0779 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-2779 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5959 · Security Note