PT-2006-7541 · Mozilla+1 · Libnss-Dev+7

Bernd Mielke + 1 · Published 1970-01-01 · Updated 2018-10-17 · CVE-2006-4571

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 1.5.0.7 Thunderbird versions prior to 1.5.0.7 SeaMonkey versions prior to 1.0.5 libnspr4 (affected versions not specified) libnss3 (affected versions not specified) libnspr-dev (affected versions not specified) libnss-dev (affected versions not specified)

Description The issue involves multiple unspecified vulnerabilities that can be exploited remotely, potentially leading to a denial of service, memory corruption, and possibly the execution of arbitrary code. This can be achieved via unspecified vectors, some of which may involve JavaScript, large images, or plugin data. The vulnerabilities can compromise the confidentiality, integrity, and availability of protected information.

Recommendations For Firefox versions prior to 1.5.0.7, update to version 1.5.0.7 or later. For Thunderbird versions prior to 1.5.0.7, update to version 1.5.0.7 or later. For SeaMonkey versions prior to 1.0.5, update to version 1.0.5 or later. For libnspr4, libnss3, libnspr-dev, and libnss-dev, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-01278

BDU:2015-01279

BDU:2015-01280

BDU:2015-01281

CVE-2006-4571

DSA-1191-1

DSA-1192-1

DSA-1210

HPSBUX02153

RHSA-2006:0675

RHSA-2006:0676

RHSA-2006:0677

RHSA-2006_0675

RHSA-2006_0676

RHSA-2006_0677

Affected Products

Firefox

Red Hat

Seamonkey

Thunderbird

Libnspr-Dev

Libnspr4

Libnss-Dev

Libnss3

References · 211

• http://secunia.com/advisories/22342 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3737 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6589 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1729 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6506 · Security Note
• http://secunia.com/advisories/22055 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5464 · Security Note
• http://secunia.com/advisories/22391 · Vendor Advisory
• http://secunia.com/advisories/21915 · Vendor Advisory
• http://ubuntu.com/usn/usn-350-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5959 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008 · Security Note