CVE-2006-2788 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer15 documents6 sources
Severity
7.5HIGHNVD
EPSS
8.3%
top 7.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian FirefoxMozilla Firefox
Timeline
PublishedJun 2
Latest updateMay 1

Description

Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶debiandebian/firefox< firefox 1.5.dfsg+1.5.0.4 (sid)
▶NVDmozilla/firefox20 versions+19

Patches

Patch: bugzilla.mozilla.org ↗Patch: bugzilla.mozilla.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-5g7c-rmr5-h878: Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibl↗2022-05-01
▶

📋Vendor Advisories

5
Ubuntu
Mozilla vulnerabilities↗2006-10-10
▶
Ubuntu
Firefox vulnerabilities↗2006-07-25
▶
Ubuntu
firefox vulnerabilities↗2006-06-09
▶
Red Hat
security flaw↗2006-06-01
▶
Debian
CVE-2006-2788: firefox - Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox a...↗2006
▶

💬Community

8
Bugzilla
CVE-2006-2788 security flaw↗2018-08-16
▶
Bugzilla
CVE-2006-2783 multiple Seamonkey issues (CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)↗2006-07-12
▶
Bugzilla
CVE-2006-2779 multiple Thunderbird issues (CVE-2006-2780, CVE-2006-2781, CVE-2006-2783,CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)↗2006-06-28
▶
Bugzilla
CVE-2006-2783 multiple Seamonkey issues (CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)↗2006-06-27
▶
Bugzilla
CVE-2006-2783 multiple Seamonkey issues (CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)↗2006-06-27
▶