CVE-2006-6497 — Out-of-bounds Write in Firefox

14 documents7 sources
Severity
6.8MEDIUMNVD
EPSS
11.2%
top 6.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Debian FirefoxDebian Firefox-esrMozilla Firefox+2 more
Timeline
PublishedDec 20
Latest updateMay 3

Description

Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages5 packages

▶NVDmozilla/firefox1.5.0.8+1
▶NVDmozilla/seamonkey1.5.0.8
▶NVDmozilla/thunderbird1.5.0.8
▶debiandebian/firefox< firefox 45.0-1 (sid)
▶debiandebian/firefox-esr< firefox 45.0-1 (sid)

🔴Vulnerability Details

2
GHSA
GHSA-rfqx-hgpj-37m4: Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2↗2022-05-03
▶
OSV
CVE-2006-6497: Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2↗2006-12-20
▶

📋Vendor Advisories

6
Ubuntu
Firefox regression↗2007-01-27
▶
Ubuntu
Thunderbird vulnerabilities↗2007-01-05
▶
Ubuntu
Firefox vulnerabilities↗2007-01-03
▶
Ubuntu
Firefox vulnerabilities↗2007-01-03
▶
Red Hat
security flaw↗2006-12-19
▶

💬Community

5
Bugzilla
CVE-2006-6497 security flaw↗2018-08-16
▶
Bugzilla
seamonkey < 1.0.7 multiple vulnerabilities↗2006-12-21
▶
Bugzilla
CVE-2006-6497 Multiple Thunderbird issues (CVE-2006-6498, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6504, CVE-2006-6505)↗2006-12-14
▶
Bugzilla
CVE-2006-6497 Multiple Seamonkey issues (CVE-2006-6498, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6504, CVE-2006-6505)↗2006-12-14
▶
Bugzilla
CVE-2006-6497 Multiple Firefox issues (CVE-2006-6498, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6504)↗2006-12-14
▶