Lucene search
Mozilla FoundationMFSA2006-30HistoryMay 02, 2006 - 12:00 a.m.
Deleted object reference when designMode="on" — Mozilla
2006-05-0200:00:00
Mozilla Foundation
www.mozilla.org
16
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.96
Percentile
99.5%
Martijn Wargers and Nick Mott each described crashes that were discovered to ultimately stem from the same root cause: attempting to use a deleted controller context when designMode was turned on. This generally results in crashing the browser, but in theory references to deleted objects can be abused to run malicious code.
Affected configurations
Node
mozillafirefoxRange<1.5.0.3
Related
checkpoint_advisories
checkpoint_advisories
debian
debian
[SECURITY] [DSA 1055-1] New Mozilla Firefox packages fix arbitrary code execution
2006-05-11 04:48:20
[SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution
2006-05-09 09:08:17
[SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution
2006-05-09 09:08:17
openvas
openvas
Debian: Security Advisory (DSA-1053-1)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200605-06 (mozilla-firefox)
2008-09-24 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
ubuntucve
ubuntucve
CVE-2006-1993
2006-04-25 00:00:00
cvelist
cvelist
CVE-2006-1993
2006-04-25 10:00:00
exploitdb
exploitdb
cve
cve
CVE-2006-1993
2006-04-25 12:50:00
nessus
nessus
Debian DSA-1055-1 : mozilla-firefox - programming error
2006-10-14 00:00:00
Debian DSA-1053-1 : mozilla - programming error
2006-10-14 00:00:00
Firefox < 1.5.0.3 iframe.contentWindow.focus() Overflow
2006-05-04 00:00:00
debiancve
debiancve
CVE-2006-1993
2006-04-25 12:50:00
gentoo
gentoo
Mozilla Firefox: Potential remote code execution
2006-05-06 00:00:00
osv
osv
mozilla-firefox - programming error
2006-05-11 00:00:00
mozilla - programming error
2006-05-09 00:00:00
nvd
nvd
CVE-2006-1993
2006-04-25 12:50:00
freebsd
freebsd
firefox -- denial of service vulnerability
2006-05-02 00:00:00
prion
prion
Buffer overflow
2006-04-25 12:50:00
cert
cert
Mozilla Firefox designMode deleted object reference
2006-05-02 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.96
Percentile
99.5%
Related for MFSA2006-30