CVE-2006-4565 Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute a...
HighCVSS 9.3
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 1.5.0.6 | No fix listed |
| mozilla seamonkey | <= 1.0.4 | No fix listed |
| mozilla Thunderbird | <= 1.5.0.6 | No fix listed |
| debian/thunderbird(Debian:12) | < 1.5.0.7-1 | 1.5.0.7-1 |
| debian/thunderbird(Debian:13) | < 1.5.0.7-1 | 1.5.0.7-1 |
| debian/thunderbird(Debian:14) | < 1.5.0.7-1 | 1.5.0.7-1 |
References
- 21906 patch third-party-advisory vendor-advisory
- 21915 third-party-advisory
- 21916 third-party-advisory
- 21939 third-party-advisory
- 21940 third-party-advisory
- 21949 patch third-party-advisory vendor-advisory
- 21950 third-party-advisory
- 22001 third-party-advisory
- 22025 third-party-advisory
- 22036 third-party-advisory
- 22055 third-party-advisory
- 22056 third-party-advisory
- 22066 third-party-advisory
- 22074 third-party-advisory
- 22088 third-party-advisory
- 22195 third-party-advisory
- 22210 third-party-advisory
- 22247 third-party-advisory
- 22274 third-party-advisory
- 22299 third-party-advisory
- 22342 third-party-advisory
- 22391 third-party-advisory
- 22422 third-party-advisory
- 22849 third-party-advisory
- 24711 third-party-advisory
- GLSA-200609-19 vendor-advisory
- GLSA-200610-01 vendor-advisory
- GLSA-200610-04 vendor-advisory
- 1016846 vdb-entry
- 1016847 vdb-entry
- 1016848 vdb-entry
- support.avaya.com
- DSA-1192 vendor-advisory
- DSA-1210 vendor-advisory
- MDKSA-2006:168 vendor-advisory
- MDKSA-2006:169 vendor-advisory
- www.mozilla.org vendor-advisory
- SUSE-SA:2006:054 vendor-advisory
- RHSA-2006:0675 vendor-advisory
- RHSA-2006:0676 patch vendor-advisory
- RHSA-2006:0677 patch vendor-advisory
- 20060915 rPSA-2006-0169-1 firefox thunderbird mailing-list
- 20042 vdb-entry
- USN-350-1 vendor-advisory
- USN-351-1 vendor-advisory
- USN-352-1 vendor-advisory
- USN-354-1 vendor-advisory
- USN-361-1 vendor-advisory
- DSA-1191 vendor-advisory
- ADV-2006-3617 vdb-entry
- ADV-2006-3748 vdb-entry
- ADV-2007-1198 vdb-entry
- ADV-2008-0083 vdb-entry
- SSRT061181 vendor-advisory
- mozilla-javascript-expression-bo(28955) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:11421 signature vdb-entry
- Debian Security Tracker CVE-2006-4565 vendor-advisory