Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2006-6502
HistoryDec 20, 2006 - 1:28 a.m.

CVE-2006-6502

2006-12-2001:28:00
redhat
web.nvd.nist.gov
53
cve-2006-6502
use-after-free vulnerability
mozilla firefox
denial of service
nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.4

Confidence

Low

EPSS

0.539

Percentile

97.6%

JSON

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) via unknown vectors.

Affected configurations

Nvd
Node
mozillafirefoxMatch1.5
OR
mozillafirefoxMatch1.5beta1
OR
mozillafirefoxMatch1.5beta2
OR
mozillafirefoxMatch1.5.0.1
OR
mozillafirefoxMatch1.5.0.2
OR
mozillafirefoxMatch1.5.0.3
OR
mozillafirefoxMatch1.5.0.4
OR
mozillafirefoxMatch1.5.0.5
OR
mozillafirefoxMatch1.5.0.6
OR
mozillafirefoxMatch1.5.0.7
OR
mozillafirefoxMatch1.5.0.8
OR
mozillafirefoxMatch2.0
OR
mozillafirefoxMatch2.0beta_1
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0alpha
OR
mozillaseamonkeyMatch1.0dev
OR
mozillaseamonkeyMatch1.0beta
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.4
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillathunderbirdMatch0.1
OR
mozillathunderbirdMatch0.2
OR
mozillathunderbirdMatch0.3
OR
mozillathunderbirdMatch0.4
OR
mozillathunderbirdMatch0.5
OR
mozillathunderbirdMatch0.6
OR
mozillathunderbirdMatch0.7
OR
mozillathunderbirdMatch0.7.1
OR
mozillathunderbirdMatch0.7.2
OR
mozillathunderbirdMatch0.7.3
OR
mozillathunderbirdMatch0.8
OR
mozillathunderbirdMatch0.9
OR
mozillathunderbirdMatch1.0
OR
mozillathunderbirdMatch1.0.1
OR
mozillathunderbirdMatch1.0.2
OR
mozillathunderbirdMatch1.0.3
OR
mozillathunderbirdMatch1.0.4
OR
mozillathunderbirdMatch1.0.5
OR
mozillathunderbirdMatch1.0.5beta
OR
mozillathunderbirdMatch1.0.6
OR
mozillathunderbirdMatch1.0.7
OR
mozillathunderbirdMatch1.0.8
OR
mozillathunderbirdMatch1.5
OR
mozillathunderbirdMatch1.5beta2
OR
mozillathunderbirdMatch1.5.0.1
OR
mozillathunderbirdMatch1.5.0.2
OR
mozillathunderbirdMatch1.5.0.3
OR
mozillathunderbirdMatch1.5.0.4
OR
mozillathunderbirdMatch1.5.0.6
OR
mozillathunderbirdMatch1.5.0.7
OR
mozillathunderbirdMatch1.5.0.8
VendorProductVersionCPE
mozillafirefox1.5cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*
mozillafirefox1.5cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*
mozillafirefox1.5cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*
mozillafirefox1.5.0.1cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*
mozillafirefox1.5.0.2cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*
mozillafirefox1.5.0.3cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*
mozillafirefox1.5.0.4cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*
mozillafirefox1.5.0.5cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*
mozillafirefox1.5.0.6cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*
mozillafirefox1.5.0.7cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 541

References

Related

debiancve 1
cvelist 1
securityvulns 1
mozilla 1
ubuntucve 1
nvd 1
veracode 1
cert 1
nessus 32
openvas 27
debian 3
gentoo 3
fedora 3
redhat 3
osv 3
oraclelinux 3
centos 4
ubuntu 4
suse 2
debiancve
debiancve
CVE-2006-6502
2006-12-20 01:28:00
cvelist
cvelist
CVE-2006-6502
2006-12-20 01:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2006-71
2006-12-20 00:00:00
mozilla
mozilla
LiveConnect crash finalizing JS objects — Mozilla
2006-12-19 00:00:00
ubuntucve
ubuntucve
CVE-2006-6502
2006-12-20 00:00:00
nvd
nvd
CVE-2006-6502
2006-12-20 01:28:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:12:23
cert
cert
Mozilla LiveConnect vulnerable to crash finalizing JS objects
2007-01-18 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:011)
2007-02-18 00:00:00
RHEL 4 : firefox (RHSA-2006:0758)
2006-12-30 00:00:00
CentOS 4 : Firefox (CESA-2006:0758)
2006-12-30 00:00:00
openvas
openvas
Debian Security Advisory DSA 1253-1 (mozilla-firefox)
2008-01-17 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:010 (mozilla-firefox)
2009-04-09 00:00:00
Debian Security Advisory DSA 1258-1 (mozilla-firefox)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1253-1] New Mozilla Firefox packages fix several vulnerabilities
2007-01-27 18:35:24
[SECURITY] [DSA 1258-1] New Mozilla Firefox packages fix several vulnerabilities
2007-02-07 07:36:56
[SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities
2007-03-10 19:12:34
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2007-01-04 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-01-10 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2007-01-04 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: firefox-1.5.0.9-1.fc5
2006-12-21 22:02:27
[SECURITY] Fedora Core 5 Update: firefox-1.5.0.9-1.fc5
2006-12-22 20:21:55
[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.9-2.fc5
2007-01-02 20:23:31
redhat
redhat
(RHSA-2006:0758) Critical: firefox security update
2006-12-19 00:00:00
(RHSA-2006:0759) Critical: seamonkey security update
2006-12-19 00:00:00
(RHSA-2006:0760) Critical: thunderbird security update
2006-12-19 00:00:00
osv
osv
mozilla-thunderbird
2007-02-07 00:00:00
mozilla-firefox
2007-01-27 00:00:00
mozilla
2007-03-10 00:00:00
oraclelinux
oraclelinux
Critical firefox security update
2006-12-20 00:00:00
Critical thunderbird security update
2006-12-20 00:00:00
Critical seamonkey security update
2006-12-20 00:00:00
centos
centos
firefox security update
2006-12-23 11:43:06
devhelp, seamonkey security update
2006-12-20 15:44:06
seamonkey security update
2006-12-20 05:41:20
ubuntu
ubuntu
Firefox regression
2007-01-27 00:00:00
Firefox vulnerabilities
2007-01-03 00:00:00
Thunderbird vulnerabilities
2007-01-05 00:00:00
suse
suse
remote denial of service in mozilla
2007-01-12 14:08:00
remote code execution in MozillaFirefox,MozillaThunderbird
2006-12-29 15:41:46

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.4

Confidence

Low

EPSS

0.539

Percentile

97.6%

JSON
Related for CVE-2006-6502
debiancve1cvelist1securityvulns1mozilla1ubuntucve1nvd1veracode1cert1nessus32openvas27debian3gentoo3fedora3redhat3osv3oraclelinux3centos4ubuntu4suse2