PT-2006-7538 · Debian+2 · Debian+8

Canadianguy + 2 · Published 1970-01-01 · Updated 2018-10-17 · CVE-2006-4566

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libnspr4 versions prior to the fixed version libnss3 versions prior to the fixed version Mozilla Firefox versions prior to 1.5.0.7 Thunderbird versions prior to 1.5.0.7 SeaMonkey versions prior to 1.0.5 libnspr-dev versions prior to the fixed version libnss-dev versions prior to the fixed version

Description The issue concerns multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including libnspr4, libnss3, libnspr-dev, and libnss-dev. These vulnerabilities can be exploited remotely, potentially leading to a breach of confidentiality, integrity, and availability of protected information. Additionally, a vulnerability in Mozilla Firefox, Thunderbird, and SeaMonkey can cause a denial of service (crash) via a malformed JavaScript regular expression.

Recommendations For libnspr4, update to a version that contains a fix for this issue. For libnss3, update to a version that contains a fix for this issue. For Mozilla Firefox versions prior to 1.5.0.7, update to version 1.5.0.7 or later. For Thunderbird versions prior to 1.5.0.7, update to version 1.5.0.7 or later. For SeaMonkey versions prior to 1.0.5, update to version 1.0.5 or later. For libnspr-dev, update to a version that contains a fix for this issue. For libnss-dev, update to a version that contains a fix for this issue.

Fix

Related Identifiers

BDU:2015-01278

BDU:2015-01279

BDU:2015-01280

BDU:2015-01281

CVE-2006-4566

DSA-1191-1

DSA-1192-1

DSA-1210

HPSBUX02153

RHSA-2006:0675

RHSA-2006:0676

RHSA-2006:0677

RHSA-2006_0675

RHSA-2006_0676

RHSA-2006_0677

Affected Products

Debian

Firefox

Red Hat

Seamonkey

Thunderbird

Libnspr-Dev

Libnspr4

Libnss-Dev

Libnss3

References · 212

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3737 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6589 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1729 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6506 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5464 · Security Note
• http://ubuntu.com/usn/usn-350-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5959 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2894 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5340 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3807 · Security Note