Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-398-1
HistoryJan 03, 2007 - 12:00 a.m.

Firefox vulnerabilities

2007-01-0300:00:00
ubuntu.com
30

6.4 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.921 High

EPSS

Percentile

98.9%

JSON

Releases

  • Ubuntu 6.10

Details

Various flaws have been reported that allow an attacker to execute
arbitrary code with user privileges by tricking the user into opening
a malicious web page containing JavaScript or SVG. (CVE-2006-6497,
CVE-2006-6498, CVE-2006-6499, CVE-2006-6501, CVE-2006-6502,
CVE-2006-6504)

Various flaws have been reported that allow an attacker to bypass
Firefox’s internal XSS protections by tricking the user into opening a
malicious web page containing JavaScript. (CVE-2006-6503,
CVE-2006-6507)

Jared Breland discovered that the “Feed Preview” feature could leak
referrer information to remote servers. (CVE-2006-6506)

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchfirefox< 2.0.0.1+0dfsg-0ubuntu0.6.10UNKNOWN
Ubuntu6.10noarchfirefox-dev< 2.0.0.1+0dfsg-0ubuntu0.6.10UNKNOWN
Ubuntu6.10noarchlibnss-dev< 2.0.0.1+0dfsg-0ubuntu0.6.10UNKNOWN
Ubuntu6.10noarchlibnss3< 2.0.0.1+0dfsg-0ubuntu0.6.10UNKNOWN
Ubuntu6.10noarchlibnspr-dev< 2.0.0.1+0dfsg-0ubuntu0.6.10UNKNOWN
Ubuntu6.10noarchlibnspr4< 2.0.0.1+0dfsg-0ubuntu0.6.10UNKNOWN

Related

openvas 31
nessus 38
ubuntu 3
gentoo 3
osv 3
debian 3
fedora 3
redhat 3
oraclelinux 3
centos 4
suse 2
mozilla 7
securityvulns 8
ubuntucve 9
cve 9
veracode 6
cert 7
debiancve 7
zdi 1
checkpoint_advisories 1
openvas
openvas
Ubuntu Update for firefox vulnerabilities USN-398-1
2009-03-23 00:00:00
Ubuntu: Security Advisory (USN-398-1)
2009-03-23 00:00:00
Ubuntu: Security Advisory (USN-398-4)
2009-03-23 00:00:00
nessus
nessus
Ubuntu 5.10 / 6.06 LTS : firefox vulnerabilities (USN-398-2)
2007-11-10 00:00:00
Ubuntu 5.10 / 6.06 LTS : firefox regression (USN-398-4)
2007-11-10 00:00:00
Ubuntu 6.10 : firefox vulnerabilities (USN-398-1)
2007-11-10 00:00:00
ubuntu
ubuntu
Firefox regression
2007-01-27 00:00:00
Firefox vulnerabilities
2007-01-03 00:00:00
Thunderbird vulnerabilities
2007-01-05 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2007-01-04 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-01-10 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2007-01-04 00:00:00
osv
osv
mozilla-firefox
2007-01-27 00:00:00
mozilla-thunderbird
2007-02-07 00:00:00
mozilla
2007-03-10 00:00:00
debian
debian
[SECURITY] [DSA 1258-1] New Mozilla Firefox packages fix several vulnerabilities
2007-02-07 07:36:56
[SECURITY] [DSA 1253-1] New Mozilla Firefox packages fix several vulnerabilities
2007-01-27 18:35:24
[SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities
2007-03-10 19:12:34
fedora
fedora
[SECURITY] Fedora Core 6 Update: firefox-1.5.0.9-1.fc5
2006-12-21 22:02:27
[SECURITY] Fedora Core 5 Update: firefox-1.5.0.9-1.fc5
2006-12-22 20:21:55
[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.9-2.fc5
2007-01-02 20:23:31
redhat
redhat
(RHSA-2006:0758) Critical: firefox security update
2006-12-19 00:00:00
(RHSA-2006:0760) Critical: thunderbird security update
2006-12-19 00:00:00
(RHSA-2006:0759) Critical: seamonkey security update
2006-12-19 00:00:00
oraclelinux
oraclelinux
Critical firefox security update
2006-12-20 00:00:00
Critical thunderbird security update
2006-12-20 00:00:00
Critical seamonkey security update
2006-12-20 00:00:00
centos
centos
firefox security update
2006-12-23 11:43:06
seamonkey security update
2006-12-20 05:41:20
thunderbird security update
2006-12-23 11:43:30
suse
suse
remote denial of service in mozilla
2007-01-12 14:08:00
remote code execution in MozillaFirefox,MozillaThunderbird
2006-12-29 15:41:46
mozilla
mozilla
Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1) — Mozilla
2006-12-19 00:00:00
XSS using outer window's Function object — Mozilla
2006-12-19 00:00:00
Privilege escalation using watch point — Mozilla
2006-12-19 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2006-68
2006-12-20 00:00:00
Mozilla Foundation Security Advisory 2006-70
2006-12-20 00:00:00
Mozilla Foundation Security Advisory 2006-76
2006-12-20 00:00:00
ubuntucve
ubuntucve
CVE-2006-6499
2006-12-20 00:00:00
CVE-2006-6498
2006-12-20 00:00:00
CVE-2006-6503
2006-12-20 00:00:00
cve
cve
CVE-2006-6499
2006-12-20 01:28:00
CVE-2006-6498
2006-12-20 01:28:00
CVE-2006-6501
2006-12-20 01:28:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:12:22
Denial Of Service (DoS)
2020-04-10 00:12:21
Denial Of Service (DoS)
2020-04-10 00:12:22
cert
cert
Mozilla denial of service vulnerability
2007-01-09 00:00:00
Mozilla JavaScript Engine multiple memory corruption vulnerabilities
2007-01-18 00:00:00
Mozilla products vulnerable to privilege escalation via a JavaScript watch() function
2007-01-18 00:00:00
debiancve
debiancve
CVE-2006-6501
2006-12-20 01:28:00
CVE-2006-6499
2006-12-20 01:28:00
CVE-2006-6498
2006-12-20 01:28:00
zdi
zdi
Mozilla Firefox SVG Processing Remote Code Execution Vulnerability
2006-12-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Products Frame Comment Objects Manipulation Memory Corruption (CVE-2006-6504)
2010-06-21 00:00:00

6.4 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.921 High

EPSS

Percentile

98.9%

JSON
Related for USN-398-1
openvas31nessus38ubuntu3gentoo3osv3debian3fedora3redhat3oraclelinux3centos4suse2mozilla7securityvulns8ubuntucve9cve9veracode6cert7debiancve7zdi1checkpoint_advisories1