5

CVE-2006-2778

EPSS 23.25%
Veröffentlicht 02.06.2006 18:02:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 58

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version <= 1.5.0.3

Mozilla ≫ Thunderbird Version <= 1.5.0.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	23.25%	0.957

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/22065

http://www.securityfocus.com/archive/1/446657/100/200/threaded

http://www.vupen.com/english/advisories/2006/3749

http://secunia.com/advisories/22066

http://www.securityfocus.com/archive/1/446658/100/200/threaded

http://www.vupen.com/english/advisories/2006/3748

http://www.vupen.com/english/advisories/2008/0083

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1

http://www.vupen.com/english/advisories/2007/0058

http://www.novell.com/linux/security/advisories/2006_35_mozilla.html

http://secunia.com/advisories/20376

http://secunia.com/advisories/21176

http://secunia.com/advisories/21183

http://secunia.com/advisories/21324

http://securitytracker.com/id?1016202

http://www.debian.org/security/2006/dsa-1118

http://www.debian.org/security/2006/dsa-1120

http://www.debian.org/security/2006/dsa-1134

http://www.securityfocus.com/archive/1/435795/100/0/threaded

http://www.securityfocus.com/bid/18228

http://www.vupen.com/english/advisories/2006/2106

http://secunia.com/advisories/21532

http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

http://secunia.com/advisories/20382

http://secunia.com/advisories/20561

http://secunia.com/advisories/20709

http://secunia.com/advisories/21178

http://secunia.com/advisories/21188

http://secunia.com/advisories/21210

http://secunia.com/advisories/21607

http://securitytracker.com/id?1016214

http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml

http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml

http://www.mandriva.com/security/advisories?name=MDKSA-2006:146

http://www.us-cert.gov/cas/techalerts/TA06-153A.html

US Government Resource

https://usn.ubuntu.com/296-1/

https://usn.ubuntu.com/296-2/

https://usn.ubuntu.com/297-1/

https://usn.ubuntu.com/297-3/

https://usn.ubuntu.com/323-1/

http://rhn.redhat.com/errata/RHSA-2006-0609.html

http://secunia.com/advisories/21134

http://secunia.com/advisories/21269

http://secunia.com/advisories/21270

http://secunia.com/advisories/21336

http://secunia.com/advisories/21631

http://www.redhat.com/support/errata/RHSA-2006-0578.html

http://www.redhat.com/support/errata/RHSA-2006-0594.html

http://www.redhat.com/support/errata/RHSA-2006-0610.html

http://www.redhat.com/support/errata/RHSA-2006-0611.html

http://www.kb.cert.org/vuls/id/421529

US Government Resource

http://www.mozilla.org/security/announce/2006/mfsa2006-38.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/26849

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9703

https://nvd.nist.gov/vuln/detail/CVE-2006-2778

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-2778

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-2778

EUVD