NVD

Id
62472  
Name
CVE-2006-3804  
Description
Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-07-27  
Modified Date
2011-03-07  
Seq
2006-3804  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324260 62472 CVE-2006-3804 20060703-01-P  View
324261 62472 CVE-2006-3804 oval:org.mitre.oval:def:11395  View
324262 62472 CVE-2006-3804 RHSA-2006:0609  View
324263 62472 CVE-2006-3804 GLSA-200608-02  View
324264 62472 CVE-2006-3804 GLSA-200608-04  View
324265 62472 CVE-2006-3804 1016587  View
324266 62472 CVE-2006-3804 1016588  View
324267 62472 CVE-2006-3804 102763  View
324268 62472 CVE-2006-3804 VU#897540  View
324269 62472 CVE-2006-3804 MDKSA-2006:143  View
324270 62472 CVE-2006-3804 MDKSA-2006:145  View
324271 62472 CVE-2006-3804 MDKSA-2006:146  View
324272 62472 CVE-2006-3804 http://www.mozilla.org/security/announce/2006/mfsa2006-49.html  View
324273 62472 CVE-2006-3804 SUSE-SA:2006:048  View
324274 62472 CVE-2006-3804 RHSA-2006:0594  View
324275 62472 CVE-2006-3804 RHSA-2006:0608  View
324276 62472 CVE-2006-3804 RHSA-2006:0611  View
324277 62472 CVE-2006-3804 HPSBUX02156  View
324278 62472 CVE-2006-3804 19181  View
324279 62472 CVE-2006-3804 USN-350-1  View
324280 62472 CVE-2006-3804 USN-329-1  View
324281 62472 CVE-2006-3804 TA06-208A  View
324282 62472 CVE-2006-3804 ADV-2006-2998  View
324283 62472 CVE-2006-3804 ADV-2006-3749  View
324284 62472 CVE-2006-3804 ADV-2007-0058  View
324285 62472 CVE-2006-3804 mozilla-vcard-base64-bo(27985)  View
324286 62472 CVE-2006-3804 https://issues.rpath.com/browse/RPL-537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58253 JVNDB-2006-000449 Mozilla 製品の Vcard 処理における整数アンダーフローの脆弱性 Mozilla Thunderbird、 SeaMonkey において、不正な BASE64 フィールドを持つ vCard を処理した場合、ヒープ領域で整数アンダーフローが発生する脆弱性が存在します。 CVE-2006-3804 19906 CVE-2006-3804 62472 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000449.html 2006-07-25 2007-04-01 View