NVD

Id
62474  
Name
CVE-2006-3806  
Description
Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified "string function arguments."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-27  
Modified Date
2011-09-08  
Seq
2006-3806  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324327 62474 CVE-2006-3806 20060703-01-P  View
324328 62474 CVE-2006-3806 oval:org.mitre.oval:def:11232  View
324329 62474 CVE-2006-3806 RHSA-2006:0609  View
324330 62474 CVE-2006-3806 GLSA-200608-02  View
324331 62474 CVE-2006-3806 GLSA-200608-04  View
324332 62474 CVE-2006-3806 1016586  View
324333 62474 CVE-2006-3806 1016587  View
324334 62474 CVE-2006-3806 1016588  View
324335 62474 CVE-2006-3806 102763  View
324336 62474 CVE-2006-3806 DSA-1159  View
324337 62474 CVE-2006-3806 DSA-1160  View
324338 62474 CVE-2006-3806 DSA-1161  View
324339 62474 CVE-2006-3806 GLSA-200608-03  View
324340 62474 CVE-2006-3806 VU#655892  View
324341 62474 CVE-2006-3806 MDKSA-2006:143  View
324342 62474 CVE-2006-3806 MDKSA-2006:145  View
324343 62474 CVE-2006-3806 MDKSA-2006:146  View
324344 62474 CVE-2006-3806 http://www.mozilla.org/security/announce/2006/mfsa2006-50.html  View
324345 62474 CVE-2006-3806 SUSE-SA:2006:048  View
324346 62474 CVE-2006-3806 RHSA-2006:0594  View
324347 62474 CVE-2006-3806 RHSA-2006:0608  View
324348 62474 CVE-2006-3806 RHSA-2006:0610  View
324349 62474 CVE-2006-3806 RHSA-2006:0611  View
324350 62474 CVE-2006-3806 20060727 rPSA-2006-0137-1 firefox  View
324351 62474 CVE-2006-3806 HPSBUX02156  View
324352 62474 CVE-2006-3806 SSRT061181  View
324353 62474 CVE-2006-3806 19181  View
324354 62474 CVE-2006-3806 USN-350-1  View
324355 62474 CVE-2006-3806 USN-354-1  View
324356 62474 CVE-2006-3806 USN-361-1  View
324357 62474 CVE-2006-3806 USN-327-1  View
324358 62474 CVE-2006-3806 USN-329-1  View
324359 62474 CVE-2006-3806 TA06-208A  View
324360 62474 CVE-2006-3806 ADV-2006-2998  View
324361 62474 CVE-2006-3806 ADV-2006-3748  View
324362 62474 CVE-2006-3806 ADV-2006-3749  View
324363 62474 CVE-2006-3806 ADV-2007-0058  View
324364 62474 CVE-2006-3806 ADV-2008-0083  View
324365 62474 CVE-2006-3806 mozilla-javascript-engine-overflow(27987)  View
324366 62474 CVE-2006-3806 https://issues.rpath.com/browse/RPL-536  View
324367 62474 CVE-2006-3806 https://issues.rpath.com/browse/RPL-537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58255 JVNDB-2006-000451 Mozilla 製品の Javascript エンジンにおける複数のヒープオーバーフローの脆弱性 Mozilla Firefox の JavaScript エンジンには、ガベージコレクションの不備により、使用されている状態の一時オブジェクトが削除されてしまう脆弱性と Object、Array、String オブジェクトの toSource() メソッドで過度に長い文字列が処理された場合に整数オーバーフローが発生する脆弱性が存在します。 CVE-2006-3806 19908 CVE-2006-3806 62474 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000451.html 2006-07-25 2007-04-01 View