Lucene search

Mozilla FoundationMFSA2006-65

HistoryNov 07, 2006 - 12:00 a.m.

Crashes with evidence of memory corruption (rv:1.8.0.8) — Mozilla

2006-11-0700:00:00

Mozilla Foundation

www.mozilla.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.29 Low

EPSS

Percentile

96.8%

JSON

As part of the Firefox 1.5.0.8 release we fixed several bugs to improve the stability of the product. Some of these were crashes that showed evidence of memory corruption and we presume that at least some of these could be exploited to run arbitrary code with enough effort.

CPENameOperatorVersion
firefoxlt1.5.0.8
seamonkeylt1.0.6
thunderbirdlt1.5.0.8

Name	Operator	Version
firefox	lt	1.5.0.8
seamonkey	lt	1.0.6
thunderbird	lt	1.5.0.8

References

nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5464

nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5747

nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5748

bugzilla.mozilla.org/show_bug.cgi?id=307809

bugzilla.mozilla.org/show_bug.cgi?id=310267

bugzilla.mozilla.org/show_bug.cgi?id=349527

bugzilla.mozilla.org/show_bug.cgi?id=350238

bugzilla.mozilla.org/show_bug.cgi?id=350370

bugzilla.mozilla.org/show_bug.cgi?id=351116

bugzilla.mozilla.org/show_bug.cgi?id=351328

bugzilla.mozilla.org/show_bug.cgi?id=351973

bugzilla.mozilla.org/show_bug.cgi?id=352271

bugzilla.mozilla.org/show_bug.cgi?id=352606

bugzilla.mozilla.org/show_bug.cgi?id=353165

bugzilla.mozilla.org/show_bug.cgi?id=354145

bugzilla.mozilla.org/show_bug.cgi?id=354151

bugzilla.mozilla.org/show_bug.cgi?id=354924

bugzilla.mozilla.org/show_bug.cgi?id=355569

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.29 Low

EPSS

Percentile

96.8%

JSON

Related for MFSA2006-65