Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-6499HistoryDec 20, 2006 - 1:28 a.m.
CVE-2006-6499
2006-12-2001:28:00
Debian Security Bug Tracker
security-tracker.debian.org
16
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.02 Low
EPSS
Percentile
88.7%
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 45.0-1 | firefox_45.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
| Debian | 10 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 45.0esr-1 | firefox-esr_45.0esr-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2006-6499
2006-12-20 00:00:00
cert
cert
Mozilla denial of service vulnerability
2007-01-09 00:00:00
cve
cve
CVE-2006-6499
2006-12-20 01:28:00
mozilla
mozilla
Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1) — Mozilla
2006-12-19 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2006-68
2006-12-20 00:00:00
openvas
openvas
Solaris Update for Mozilla 1.7_x86 119116-35
2009-10-13 00:00:00
Debian Security Advisory DSA 1258-1 (mozilla-firefox)
2008-01-17 00:00:00
Debian Security Advisory DSA 1253-1 (mozilla-firefox)
2008-01-17 00:00:00
osv
osv
debian
debian
nessus
nessus
Debian DSA-1253-1 : mozilla-firefox - several vulnerabilities
2007-02-09 00:00:00
Debian DSA-1258-1 : mozilla-thunderbird - several vulnerabilities
2007-02-09 00:00:00
Ubuntu 5.10 / 6.06 LTS : firefox regression (USN-398-4)
2007-11-10 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2007-01-03 00:00:00
Firefox regression
2007-01-27 00:00:00
Thunderbird vulnerabilities
2007-01-05 00:00:00
gentoo
gentoo
SeaMonkey: Multiple vulnerabilities
2007-01-10 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2007-01-04 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird
2006-12-29 15:41:46
remote denial of service in mozilla
2007-01-12 14:08:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.02 Low
EPSS
Percentile
88.7%
Related for DEBIANCVE:CVE-2006-6499