PT-2006-3699 · Mozilla+1 · Firefox+2

Published

2006-06-02

·

Updated

2018-10-18

·

CVE-2006-2780

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 1.5.0.4 Mozilla Thunderbird versions prior to 1.5.0.4
Description The issue is related to an integer overflow that can cause a denial of service (crash) and potentially allow the execution of arbitrary code. This is achieved through "jsstr tagify," which results in memory corruption.
Recommendations For Mozilla Firefox versions prior to 1.5.0.4, update to version 1.5.0.4 or later to resolve the issue. For Mozilla Thunderbird versions prior to 1.5.0.4, update to version 1.5.0.4 or later to resolve the issue.

Exploit

Fix

DoS

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-2780
DSA-1118
DSA-1120
DSA-1134-1
HPSBUX02153
RHSA-2006:0578
RHSA-2006:0609
RHSA-2006:0610
RHSA-2006:0611
RHSA-2006_0609
RHSA-2006_0610
RHSA-2006_0611

Affected Products

Firefox
Thunderbird
Red Hat