Published: 02/02/2006 Updated: 19/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 790

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Firefox

The Javascript interpreter (jsinterp.c) in Mozilla and Firefox prior to 1.5.1 does not properly dereference objects, which allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.10.1
mozilla firefox 0.8
mozilla firefox 1.0.2
mozilla firefox 1.0.3
mozilla firefox 1.5
mozilla mozilla 1.4
mozilla firefox 0.10
mozilla firefox 0.9
mozilla firefox 1.0
mozilla firefox 1.0.1
mozilla firefox 1.0.7
mozilla mozilla 1.5
mozilla firefox 0.9.1
mozilla firefox 1.0.4
mozilla firefox 1.0.5
mozilla mozilla 1.4.1
mozilla firefox 0.9.2
mozilla firefox 0.9.3
mozilla firefox 1.0.6

Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables Under some rare circumstances, a malicious mail with embedded JavaScript could exploit this to execute arbitrary code with the privileges of the user (CVE-2006-0292, CVE-2006-1742) ...

Web pages with extremely long titles caused subsequent launches of Mozilla browser to hang for up to a few minutes, or caused Mozilla to crash on computers with insufficient memory (CVE-2005-4134) ...

Web pages with extremely long titles caused subsequent launches of Firefox browser to hang for up to a few minutes, or caused Firefox to crash on computers with insufficient memory (CVE-2005-4134) ...

Mozilla Foundation Security Advisory 2006-01 JavaScript garbage-collection hazards Announced February 1, 2006 Reporter Igor Bukanov Impact Moderate Products Firefox, Mozilla Suite, SeaMonkey, Thunderbird Fixed in ...

NVD-CWE-Other https://bugzilla.mozilla.org/show_bug.cgi?id=316885 http://www.redhat.com/support/errata/RHSA-2006-0199.html http://www.redhat.com/support/errata/RHSA-2006-0200.html http://www.securityfocus.com/bid/16476 http://secunia.com/advisories/18700 http://secunia.com/advisories/18703 http://secunia.com/advisories/18704 http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html http://securitytracker.com/id?1015570 http://secunia.com/advisories/18708 http://secunia.com/advisories/18709 http://secunia.com/advisories/18705 http://secunia.com/advisories/18706 ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U http://secunia.com/advisories/19230 http://www.debian.org/security/2006/dsa-1044 http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml http://secunia.com/advisories/19759 http://secunia.com/advisories/19821 http://www.debian.org/security/2006/dsa-1046 http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml http://secunia.com/advisories/19823 http://secunia.com/advisories/19852 http://secunia.com/advisories/19862 http://secunia.com/advisories/19863 http://secunia.com/advisories/19902 http://www.debian.org/security/2006/dsa-1051 http://secunia.com/advisories/19950 http://secunia.com/advisories/19941 http://secunia.com/advisories/19746 http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml http://www.redhat.com/support/errata/RHSA-2006-0330.html ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt http://secunia.com/advisories/21033 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 http://secunia.com/advisories/21622 http://www.mozilla.org/security/announce/2006/mfsa2006-01.html http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://secunia.com/advisories/19780 http://secunia.com/advisories/20051 http://www.mandriva.com/security/advisories?name=MDKSA-2006:036 http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 http://www.mandriva.com/security/advisories?name=MDKSA-2006:037 http://secunia.com/advisories/22065 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 http://www.vupen.com/english/advisories/2006/3749 http://www.vupen.com/english/advisories/2006/3391 http://www.novell.com/linux/security/advisories/2006_04_25.html http://www.vupen.com/english/advisories/2006/0413 https://exchange.xforce.ibmcloud.com/vulnerabilities/24430 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A670 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10016 https://usn.ubuntu.com/276-1/https://usn.ubuntu.com/275-1/https://usn.ubuntu.com/271-1/http://www.securityfocus.com/archive/1/446657/100/200/threaded http://www.securityfocus.com/archive/1/438730/100/0/threaded http://www.securityfocus.com/archive/1/425978/100/0/threaded http://www.securityfocus.com/archive/1/425975/100/0/threaded https://nvd.nist.gov https://usn.ubuntu.com/276-1/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook