PT-2006-5897 · Mozilla · Firefox

Thor Larholm · Published 2006-10-03 · Updated 2024-08-07 · CVE-2006-5159

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox (affected versions not specified)

Description A stack-based buffer overflow issue in Mozilla Firefox allows remote attackers to potentially execute arbitrary code via unspecified vectors involving JavaScript. However, the severity of this issue has been disputed by the vendor and original researchers, who claim that the presented code does not result in remote code execution but rather causes a crash and consumes system resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-5159

Affected Products

Firefox

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-5159 · Security Note
• http://securityfocus.com/bid/20294 · Note
• http://securityfocus.com/archive/1/447493/100/0/threaded · Note
• http://securityfocus.com/bid/20282 · Note
• http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon · Note
• http://securitytracker.com/id?1016962 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29317 · Note
• http://securityfocus.com/archive/1/447497/100/0/threaded · Note
• http://securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html · Note
• http://securityreason.com/securityalert/1678 · Note