SUSE CVE-2006-3677

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object window.navigator that are accessed when Java starts up, which causes a crash that leads to code execution...

Mozilla Suite/Firefox < 1.5.0.5 - Navigator Object Code Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Mozilla Browsers JavaScript Navigator Object Memory Corruption - Ver2 (CVE-2006-3677)

Mozilla Firefox and Seamonkey are very popular open source web browsers from Mozilla Foundation, based on the Mozilla Suite code base. The browser is an application designed for tasks related to web browsing, such as displaying HTML pages, downloading files, rendering different media, and so on...

CVE-2006-3677

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16300 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/mozillanavigatorjava.rb 2025-02-06 03:13:38+00:00|...

Mozilla Suite/Firefox Navigator Object Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core/constants' require 'msf/core'...

Gentoo Security Advisory GLSA 200608-03 (Firefox)

The remote host is missing updates announced in advisory GLSA 200608-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Design/Logic Flaw

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service memory exhaustion and device crash via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-1981)

This security update brings Mozilla Firefox to version 1.5.0.6. Note that on SUSE Linux 9.2, 9.3 and 10.0 this is a major version upgrade, please check if your manually installed extensions and plugins are still working. Please also see...

CentOS 4 : seamonkey (CESA-2006:0609)

Updated SeaMonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and...

seamonkey security update

CentOS Errata and Security Advisory CESA-2006:0608 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

CentOS 4 : thunderbird (CESA-2006:0611)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. The Mozilla Foundation...

Netscape/K-Meleon/Flock JavaScript navigator Vulnerability

Description: The newest versions of Netscape, K-Meleon and Flock browsers are affected to JavaScript navigator vulnerability described in http://browserfun.blogspot.com/2006/07/mobb-28-mozilla-navigator-object.html and Mozilla Foundation Security Advisory 2006-45. When method used in a web page...

RHEL 4 : firefox (RHSA-2006:0610)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0610 advisory. Mozilla Firefox is an open source Web browser. The Mozilla Foundation has discontinued support for the Mozilla Firefox 1.0 branch. This upda...

Mozilla Firefox <= 1.5.0.4 Javascript Navigator Object Code Execution PoC

Exploit for multiple platform in category remote exploits ========================================================================= Mozilla Firefox // MoBB Demonstration function Demo // Exploit for http://www.mozilla.org/security/announce/2006/mfsa2006-45.html //...

US-CERT Technical Cyber Security Alert TA06-208A -- Mozilla Products Contain Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-208A Mozilla Products Contain Multiple Vulnerabilities Original release date: July 27, 2006 Last revised: -- Source: US-CERT Systems Affected Mozilla SeaMonkey Mozilla Firefox Mozilla...

Mozilla Firefox 1.5.0.4 - JavaScript Navigator Object Code Execution

Mozilla Firefox 1.5.0.4 - JavaScript Navigator Object Code Execution // MoBB Demonstration function Demo // Exploit for http://www.mozilla.org/security/announce/2006/mfsa2006-45.html // https://bugzilla.mozilla.org/showbug.cgi?id=342267 // CVE-2006-3677 // The Java plugin is required for this to...

CVE-2006-3677

A memory corruption vulnerability exists in Mozilla Firefox (before 1.5.0.5) and SeaMonkey (before 1.0.3) due to insufficient checks on user-supplied data when assigning values to objects. Specifically, when Java starts up, it may reference properties of the window.navigator object, triggering a ...

CVE-2006-3677

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object window.navigator that are accessed when Java starts up, which causes a crash that leads to code execution...

Mozilla fails to properly release JavaScript references

Overview Mozilla products fail to properly release memory. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Mozilla products fail to properly release JavaScript references. This may corrupt memory in a way that can allow an attacker to...

Mozilla SuiteFirefox 1.5.0.5 - Navigator Object Code Execution (Metasploit)

Mozilla SuiteFirefox 1.5.0.5 - Navigator Object Code Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...