PT-2006-7102 · Mozilla+1 · Firefox+4

Igor Bukanov + 2 · Published 2006-12-19 · Updated 2018-10-17 · CVE-2006-6498

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 2.x prior to 2.0.0.1 Mozilla Firefox versions 1.5.x prior to 1.5.0.9 Thunderbird versions prior to 1.5.0.9 SeaMonkey versions prior to 1.0.7 Mozilla versions 1.7 and earlier

Description The issue affects the JavaScript engine, allowing remote attackers to cause a denial of service, which may result in memory corruption and a crash, and possibly execute arbitrary code. The exact attack vectors are unknown.

Recommendations For Mozilla Firefox versions 2.x prior to 2.0.0.1, update to version 2.0.0.1 or later. For Mozilla Firefox versions 1.5.x prior to 1.5.0.9, update to version 1.5.0.9 or later. For Thunderbird versions prior to 1.5.0.9, update to version 1.5.0.9 or later. For SeaMonkey versions prior to 1.0.7, update to version 1.0.7 or later. For Mozilla versions 1.7 and earlier, update to a version later than 1.7.

Fix

Related Identifiers

CVE-2006-6498

DSA-1253-1

DSA-1258-1

DSA-1265-1

HPSBUX02153

RHSA-2006:0758

RHSA-2006:0759

RHSA-2006:0760

RHSA-2006_0758

RHSA-2006_0759

RHSA-2006_0760

Affected Products

Mozilla Firefox

Firefox

Red Hat

Seamonkey

Thunderbird

References · 199

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3737 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6589 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1729 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6506 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5464 · Security Note
• http://secunia.com/advisories/23545 · Vendor Advisory
• http://secunia.com/advisories/23514 · Vendor Advisory
• http://secunia.com/advisories/23672 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5959 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2894 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5340 · Security Note