CVE-2006-0293 — Out-of-bounds Write in Firefox

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
3.8%
top 11.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian FirefoxMozilla Firefox
Timeline
PublishedFeb 2
Latest updateMay 1

Description

The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via user-defined methods that trigger garbage collection in a way that operates on freed objects.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶debiandebian/firefox< firefox 1.5.dfsg+1.5.0.1-1 (sid)

Patches

Patch: bugzilla.mozilla.org ↗Patch: bugzilla.mozilla.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-m9q5-xj5r-c8v2: The function allocation code (js_NewFunction in jsfun↗2022-05-01
▶

📋Vendor Advisories

1
Debian
CVE-2006-0293: firefox - The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows a...↗2006
▶