Lucene search

K
ubuntuUbuntuUSN-398-4
HistoryJan 27, 2007 - 12:00 a.m.

Firefox regression

2007-01-2700:00:00
ubuntu.com
31

6.7 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.921 High

EPSS

Percentile

98.9%

Releases

  • Ubuntu 6.06
  • Ubuntu 5.10

Details

USN-398-2 fixed vulnerabilities in Firefox 1.5. However, when
auto-filling saved-password login forms without a username field,
Firefox would crash. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Various flaws have been reported that allow an attacker to execute
arbitrary code with user privileges by tricking the user into opening
a malicious web page containing JavaScript or SVG. (CVE-2006-6497,
CVE-2006-6498, CVE-2006-6499, CVE-2006-6501, CVE-2006-6502,
CVE-2006-6504)

Various flaws have been reported that allow an attacker to bypass
Firefox’s internal XSS protections by tricking the user into opening a
malicious web page containing JavaScript. (CVE-2006-6503)

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.9-0ubuntu0.6.06.1UNKNOWN
Ubuntu5.10noarchfirefox< 1.5.dfsg+1.5.0.9-0ubuntu0.5.10.1UNKNOWN

6.7 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.921 High

EPSS

Percentile

98.9%