NVD

Id
61464  
Name
CVE-2006-2779  
Description
Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) "Content-implemented tree views," (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-06-02  
Modified Date
2011-03-07  
Seq
2006-2779  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317733 61464 CVE-2006-2779 oval:org.mitre.oval:def:9762  View
317734 61464 CVE-2006-2779 RHSA-2006:0609  View
317735 61464 CVE-2006-2779 1016202  View
317736 61464 CVE-2006-2779 1016214  View
317737 61464 CVE-2006-2779 102943  View
317738 61464 CVE-2006-2779 200387  View
317739 61464 CVE-2006-2779 DSA-1118  View
317740 61464 CVE-2006-2779 DSA-1120  View
317741 61464 CVE-2006-2779 DSA-1134  View
317742 61464 CVE-2006-2779 DSA-1159  View
317743 61464 CVE-2006-2779 DSA-1160  View
317744 61464 CVE-2006-2779 GLSA-200606-12  View
317745 61464 CVE-2006-2779 GLSA-200606-21  View
317746 61464 CVE-2006-2779 VU#466673  View
317747 61464 CVE-2006-2779 MDKSA-2006:143  View
317748 61464 CVE-2006-2779 MDKSA-2006:145  View
317749 61464 CVE-2006-2779 MDKSA-2006:146  View
317750 61464 CVE-2006-2779 http://www.mozilla.org/security/announce/2006/mfsa2006-32.html  View
317751 61464 CVE-2006-2779 SUSE-SA:2006:035  View
317752 61464 CVE-2006-2779 RHSA-2006:0578  View
317753 61464 CVE-2006-2779 RHSA-2006:0594  View
317754 61464 CVE-2006-2779 RHSA-2006:0610  View
317755 61464 CVE-2006-2779 RHSA-2006:0611  View
317756 61464 CVE-2006-2779 20060602 rPSA-2006-0091-1 firefox thunderbird  View
317757 61464 CVE-2006-2779 SSRT061236  View
317758 61464 CVE-2006-2779 SSRT061181  View
317759 61464 CVE-2006-2779 18228  View
317760 61464 CVE-2006-2779 USN-296-1  View
317761 61464 CVE-2006-2779 USN-296-2  View
317762 61464 CVE-2006-2779 USN-297-1  View
317763 61464 CVE-2006-2779 USN-297-3  View
317764 61464 CVE-2006-2779 USN-323-1  View
317765 61464 CVE-2006-2779 TA06-153A  View
317766 61464 CVE-2006-2779 ADV-2006-2106  View
317767 61464 CVE-2006-2779 ADV-2006-3748  View
317768 61464 CVE-2006-2779 ADV-2006-3749  View
317769 61464 CVE-2006-2779 ADV-2007-3488  View
317770 61464 CVE-2006-2779 ADV-2008-0083  View
317771 61464 CVE-2006-2779 mozilla-browserengine-memory-corruption(26843)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58123 JVNDB-2006-000319 Mozilla 製品における複数のメモリ破壊によるサービス運用妨害 (DoS) の脆弱性 Mozilla 製品には、ネストされた option 要素の処理、DOMNodeRemoved イベントの処理、Content-implemented tree views に関連する処理、BoxObjects に関連する処理、XBL の実装における処理、iframe が自身を削除する処理において、メモリ破壊の脆弱性が存在します。 CVE-2006-2779 18881 CVE-2006-2779 61464 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000319.html 2006-06-01 2007-10-19 View