CVE-2006-6499

Опубликовано: 20 дек. 2006

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.

Ссылки

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Broken Link
http://secunia.com/advisories/23282
Broken Link
Third Party Advisory
http://secunia.com/advisories/23420
Broken Link
Third Party Advisory
http://secunia.com/advisories/23422
Broken Link
Third Party Advisory
http://secunia.com/advisories/23545
Broken Link
Third Party Advisory
http://secunia.com/advisories/23589
Broken Link
Third Party Advisory
http://secunia.com/advisories/23591
Broken Link
Third Party Advisory
http://secunia.com/advisories/23614
Broken Link
Third Party Advisory
http://secunia.com/advisories/23672
Broken Link
Third Party Advisory
http://secunia.com/advisories/23692
Broken Link
Third Party Advisory
http://secunia.com/advisories/23988
Broken Link
Third Party Advisory
http://secunia.com/advisories/24078
Broken Link
Third Party Advisory
http://secunia.com/advisories/24390
Broken Link
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200701-02.xml
Broken Link
Third Party Advisory
http://securitytracker.com/id?1017398
Broken Link
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1017405
Broken Link
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1017406
Broken Link
Third Party Advisory
VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102846-1
Broken Link
http://www.debian.org/security/2007/dsa-1253
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 1.5 (включая) до 1.5.0.9 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.1 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия до 1.0.7 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия до 1.5.0.9 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.24284

Средний

4.3 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2006-6499

ubuntu

больше 18 лет назад

CVE-2006-6499

debian

больше 18 лет назад

The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x befo ...

GHSA-636h-f5g9-p45x

github

больше 3 лет назад

EPSS

Процентиль: 96%

0.24284

Средний

4.3 Medium

CVSS2

Дефекты

CWE-835