Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2006-6500
HistoryDec 20, 2006 - 1:28 a.m.

CVE-2006-6500

2006-12-2001:28:00
Debian Security Bug Tracker
security-tracker.debian.org
12

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.237 Low

EPSS

Percentile

96.5%

JSON

Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 125.0.1-2firefox_125.0.1-2_all.deb

Related

cve 1
ubuntucve 1
securityvulns 1
cert 1
mozilla 1
nessus 14
gentoo 3
openvas 8
suse 2
cve
cve
CVE-2006-6500
2006-12-20 01:28:00
ubuntucve
ubuntucve
CVE-2006-6500
2006-12-20 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2006-69
2006-12-20 00:00:00
cert
cert
Mozilla products vulnerable to heap overflow via miscalculated size during conversion of an image
2007-01-18 00:00:00
mozilla
mozilla
CSS cursor image buffer overflow (Windows only) — Mozilla
2006-12-19 00:00:00
nessus
nessus
GLSA-200701-03 : Mozilla Thunderbird: Multiple vulnerabilities
2007-01-08 00:00:00
Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:010)
2007-02-18 00:00:00
Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:011)
2007-02-18 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2007-01-04 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-01-10 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2007-01-04 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200701-03 (mozilla-thunderbird)
2008-09-24 00:00:00
Mandriva Update for mozilla-thunderbird MDKSA-2007:011 (mozilla-thunderbird)
2009-04-09 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:010 (mozilla-firefox)
2009-04-09 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird
2006-12-29 15:41:46
remote denial of service in mozilla
2007-01-12 14:08:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.237 Low

EPSS

Percentile

96.5%

JSON
Related for DEBIANCVE:CVE-2006-6500
cve1ubuntucve1securityvulns1cert1mozilla1nessus14gentoo3openvas8suse2