Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-3811
HistoryJul 27, 2006 - 12:00 a.m.

CVE-2006-3811

2006-07-2700:00:00
ubuntu.com
ubuntu.com
6

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.686 Medium

EPSS

Percentile

98.0%

Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird
before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause
a denial of service (crash) and possibly execute arbitrary code via
Javascript that leads to memory corruption, including (1)
nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the
string class in out-of-memory conditions, (3) table row and column groups,
(4) “anonymous box selectors outside of UA stylesheets,” (5) stale
references to “removed nodes,” and (6) running the
crypto.generateCRMFRequest callback on deleted context.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1UNKNOWN
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.06UNKNOWN
ubuntu6.10noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.7.04UNKNOWN
ubuntu6.10noarchxulrunner< 1.8.0.5-4.2UNKNOWN
ubuntu7.04noarchxulrunner< 1.8.0.5-4.2UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.686 Medium

EPSS

Percentile

98.0%