Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2006-1993

HistoryApr 25, 2006 - 12:50 p.m.

CVE-2006-1993

2006-04-2512:50:00

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.96

Percentile

99.5%

JSON

Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller context object. NOTE: this was originally claimed to be a buffer overflow in (1) js320.dll and (2) xpcom_core.dll, but the vendor disputes this claim.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 1.5.dfsg+1.5.0.3-1firefox_1.5.dfsg+1.5.0.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	999	all	firefox	< 1.5.dfsg+1.5.0.3-1	firefox_1.5.dfsg+1.5.0.3-1_all.deb

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.96

Percentile

99.5%

JSON

Related for DEBIANCVE:CVE-2006-1993