6.8

CVE-2006-6500

Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version >= 1.5 < 1.5.0.9
Mozilla ≫ Firefox Version >= 2.0 < 2.0.0.1
Mozilla ≫ Seamonkey Version < 1.0.7
Mozilla ≫ Thunderbird Version < 1.5.0.9
Debian ≫ Debian Linux Version3.1
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version5.10
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version6.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.29% 0.942
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.vupen.com/english/advisories/2008/0083
Third Party Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Broken Link
http://secunia.com/advisories/23282
Third Party Advisory
http://secunia.com/advisories/23420
Third Party Advisory
http://secunia.com/advisories/23422
Third Party Advisory
http://secunia.com/advisories/23545
Third Party Advisory
http://secunia.com/advisories/23598
Third Party Advisory
http://secunia.com/advisories/23614
Third Party Advisory
http://secunia.com/advisories/23672
Third Party Advisory
http://secunia.com/advisories/23692
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200701-02.xml
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:010
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:011
Third Party Advisory
http://www.novell.com/linux/security/advisories/2006_80_mozilla.html
Broken Link
http://www.novell.com/linux/security/advisories/2007_06_mozilla.html
Broken Link
http://www.securityfocus.com/bid/21668
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA06-354A.html
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2006/5068
Third Party Advisory
http://securitytracker.com/id?1017399
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1017400
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1017401
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/722244
Third Party Advisory
US Government Resource
http://www.mozilla.org/security/announce/2006/mfsa2006-69.html
Vendor Advisory