CVE-2006-3801 — Firefox vulnerability

17 documents7 sources
Severity
7.5HIGHNVD
EPSS
27.8%
top 3.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Mozilla ThunderbirdDebian FirefoxDebian Thunderbird+2 more
Timeline
PublishedJul 27
Latest updateMay 3

Description

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages5 packages

▶NVDmozilla/firefox5 versions+4
▶NVDmozilla/seamonkey1.0, 1.0.1, 1.0.2+2
▶debiandebian/firefox< firefox 1.5.dfsg+1.5.0.5-1 (sid)
▶Debianmozilla/thunderbird< 1.5.0.5-1+3
▶debiandebian/thunderbird< firefox 1.5.dfsg+1.5.0.5-1 (sid)

Patches

Patch: secunia.com ↗Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-888j-w88x-vjqr: Mozilla Firefox 1↗2022-05-03
▶
OSV
CVE-2006-3801: Mozilla Firefox 1↗2006-07-27
▶

📋Vendor Advisories

4
Ubuntu
firefox vulnerabilities↗2006-07-28
▶
Red Hat
security flaw↗2006-07-26
▶
Red Hat
vulnerabilities: CVE-2006-{3113,3677,3801-3812}↗2006-07-26
▶
Debian
CVE-2006-3801: firefox - Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly ...↗2006
▶

💬Community

10
Bugzilla
CVE-2006-3801 security flaw↗2018-08-16
▶
Bugzilla
CVE-2006-3801, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3809, CVE-2006-3811, CVE-2006-3812: major (public) security flaws fixed in firefox 1.5.0.5↗2006-07-28
▶
Bugzilla
Seamonkey multiple vulnerabilities: CVE-2006-{3113,3677,3801-3812}↗2006-07-27
▶
Bugzilla
major (public) security flaws fixed in firefox 1.5.0.5: CVE-2006-3113, CVE-2006-3677, CVE-2006-3801, CVE-2006-3802, CVE-2006-3803,CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3↗2006-07-27
▶
Bugzilla
CVE-2006-3801 Multiple Seamonkey issues (CVE-2006-3677, CVE-2006-3113, CVE-2006-3802, CVE-2006-3803, CVE-2006-3804, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3809, CVE-2006-↗2006-07-26
▶