CVE

Id
21737  
CVE No.
CVE-2006-5633  
Status
Candidate  
Description
Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service (crash) by creating a range object using createRange, calling selectNode on a DocType node (DOCUMENT_TYPE_NODE), then calling createContextualFragment on the range, which triggers a null dereference. NOTE: the original Bugtraq post mentioned that code execution was possible, but followup analysis has shown that it is only a null dereference.  
Phase
Assigned (20061031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208264 21737 CVE-2006-5633 BUGTRAQ:20061127 Re: New Flaw in Firefox 2.0: DoS and possible remote code execution  View
208265 21737 CVE-2006-5633 URL:http://www.securityfocus.com/archive/1/archive/1/452803/100/0/threaded  View
208266 21737 CVE-2006-5633 BUGTRAQ:20061101 Re: New Flaw in Firefox 2.0: DoS and possible remote code execution  View
208267 21737 CVE-2006-5633 URL:http://www.securityfocus.com/archive/1/archive/1/450682/100/200/threaded  View
208268 21737 CVE-2006-5633 FULLDISC:20061030 Firefox <= 2.0 crash  View
208269 21737 CVE-2006-5633 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050416.html  View
208270 21737 CVE-2006-5633 BUGTRAQ:20061031 New Flaw in Firefox 2.0: DoS and possible remote code execution  View
208271 21737 CVE-2006-5633 URL:http://www.securityfocus.com/archive/1/archive/1/450155/100/0/threaded  View
208272 21737 CVE-2006-5633 BUGTRAQ:20061031 Re: New Flaw in Firefox 2.0: DoS and possible remote code execution  View
208273 21737 CVE-2006-5633 URL:http://www.securityfocus.com/archive/1/450168/100/0/threaded  View
208274 21737 CVE-2006-5633 BUGTRAQ:20061031 Re: New Flaw in Firefox 2.0: DoS and possible remote code execution  View
208275 21737 CVE-2006-5633 URL:http://www.securityfocus.com/archive/1/archive/1/450167/100/0/threaded  View
208276 21737 CVE-2006-5633 MISC:http://www.gotfault.net/research/advisory/gadv-firefox.txt  View
208277 21737 CVE-2006-5633 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=358797  View
208278 21737 CVE-2006-5633 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213237  View
208279 21737 CVE-2006-5633 BID:20799  View
208280 21737 CVE-2006-5633 URL:http://www.securityfocus.com/bid/20799  View
208281 21737 CVE-2006-5633 XF:firefox-createrange-dos(29916)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61115 JVNDB-2006-003381 Web Wiz Forums の forum/search.asp における SQL インジェクションの脆弱性 Web Wiz Forums の forum/search.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5635 21737 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003381.html  View