Уязвимость в реализациях DHTML, позволяющая вызвать DoS атаку и выполнить произвольный код в Mozilla Firefox, Thunderbird и SeaMonkey
Описание
Неустановленная уязвимость в Firefox и Thunderbird до версии 1.5.0.2, а также SeaMonkey до версии 1.0.1, позволяет злоумышленникам вызвать DoS атаку (аварийное завершение работы) и возможно выполнить произвольный код через неопределенные векторы атаки, связанные с DHTML.
Затронутые версии ПО
- Firefox до версии 1.5.0.2
- Thunderbird до версии 1.5.0.2
- SeaMonkey до версии 1.0.1
Тип уязвимости
- DoS атака (аварийное завершение работы)
- Выполнение произвольного кода
Примечание
Из-за недостатка информации от производителя на 13 апреля 2006 года трудно определить, в чем различия между CVE-2006-1529, CVE-2006-1530, CVE-2006-1531 и CVE-2006-1723.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Third Party Advisory
- Third Party AdvisoryUS Government Resource
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Одно из
EPSS
7.5 High
CVSS2
Дефекты
Связанные уязвимости
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, a ...
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
EPSS
7.5 High
CVSS2