CVE-2006-6499

2006-12-2000:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.02 Low

EPSS

Percentile

88.7%

JSON

The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before
1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites
memory instead of exiting when the floating point precision is reduced,
which allows remote attackers to cause a denial of service via any plugins
that reduce the precision.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1UNKNOWN
ubuntu6.10noarchfirefox< 2.0.0.6+0dfsg-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchfirefox< 2.0.0.6+1-0ubuntu1UNKNOWN
ubuntu7.10noarchfirefox-3.0< 3.0~alpha7-0ubuntu6UNKNOWN
ubuntu7.10noarchiceape< 1.1.4-1ubuntu2UNKNOWN
ubuntu7.10noarchlightning-sunbird< 0.5-0ubuntu4UNKNOWN
ubuntu7.10noarchmidbrowser< 0.1.6b-0ubuntu2UNKNOWN
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.06UNKNOWN
ubuntu6.10noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.7.04UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1	UNKNOWN
ubuntu	6.10	noarch	firefox	< 2.0.0.6+0dfsg-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	firefox	< 2.0.0.6+1-0ubuntu1	UNKNOWN
ubuntu	7.10	noarch	firefox-3.0	< 3.0~alpha7-0ubuntu6	UNKNOWN
ubuntu	7.10	noarch	iceape	< 1.1.4-1ubuntu2	UNKNOWN
ubuntu	7.10	noarch	lightning-sunbird	< 0.5-0ubuntu4	UNKNOWN
ubuntu	7.10	noarch	midbrowser	< 0.1.6b-0ubuntu2	UNKNOWN
ubuntu	6.06	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.6.06	UNKNOWN
ubuntu	6.10	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.7.04	UNKNOWN