NVD

Id
62892  
Name
CVE-2006-4253  
Description
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-08-21  
Modified Date
2011-03-07  
Seq
2006-4253  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
327000 62892 CVE-2006-4253 20060901-01-P  View
327001 62892 CVE-2006-4253 http://lcamtuf.coredump.cx/ffoxdie.html  View
327002 62892 CVE-2006-4253 http://lcamtuf.coredump.cx/ffoxdie3.html  View
327003 62892 CVE-2006-4253 oval:org.mitre.oval:def:9528  View
327004 62892 CVE-2006-4253 GLSA-200609-19  View
327005 62892 CVE-2006-4253 GLSA-200610-01  View
327006 62892 CVE-2006-4253 GLSA-200610-04  View
327007 62892 CVE-2006-4253 1016846  View
327008 62892 CVE-2006-4253 1016847  View
327009 62892 CVE-2006-4253 1016848  View
327010 62892 CVE-2006-4253 http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm  View
327011 62892 CVE-2006-4253 MDKSA-2006:168  View
327012 62892 CVE-2006-4253 MDKSA-2006:169  View
327013 62892 CVE-2006-4253 http://www.mozilla.org/security/announce/2006/mfsa2006-59.html  View
327014 62892 CVE-2006-4253 SUSE-SA:2006:054  View
327015 62892 CVE-2006-4253 http://www.pianetapc.it/view.php?id=770  View
327016 62892 CVE-2006-4253 RHSA-2006:0675  View
327017 62892 CVE-2006-4253 RHSA-2006:0676  View
327018 62892 CVE-2006-4253 RHSA-2006:0677  View
327019 62892 CVE-2006-4253 http://www.securiteam.com/securitynews/5VP0M0AJFW.html  View
327020 62892 CVE-2006-4253 20060815 Re: Concurrency-related vulnerabilities in browsers - expect problems  View
327021 62892 CVE-2006-4253 20060817 Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems  View
327022 62892 CVE-2006-4253 20060812 Concurrency-related vulnerabilities in browsers - expect problems  View
327023 62892 CVE-2006-4253 20060817 RE: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems  View
327024 62892 CVE-2006-4253 20060915 rPSA-2006-0169-1 firefox thunderbird  View
327025 62892 CVE-2006-4253 20061006 Re: Concurrency-related vulnerabilities in browsers - expect problems  View
327026 62892 CVE-2006-4253 20061005 Re: Concurrency-related vulnerabilities in browsers - expect problems  View
327027 62892 CVE-2006-4253 20061017 Flaw in Firefox 2.0 RC2  View
327028 62892 CVE-2006-4253 20061017 Re: Flaw in Firefox 2.0 RC2  View
327029 62892 CVE-2006-4253 20061019 Re: Flaw in Firefox 2.0 RC2  View
327030 62892 CVE-2006-4253 20061023 Flaw in Firefox 2.0 Final  View
327031 62892 CVE-2006-4253 20061025 Mozilla Firefox JavaScript Handler Race Condition Memory Corruption Vulnerability  View
327032 62892 CVE-2006-4253 19488  View
327033 62892 CVE-2006-4253 19534  View
327034 62892 CVE-2006-4253 USN-350-1  View
327035 62892 CVE-2006-4253 USN-351-1  View
327036 62892 CVE-2006-4253 USN-352-1  View
327037 62892 CVE-2006-4253 USN-354-1  View
327038 62892 CVE-2006-4253 ADV-2006-3617  View
327039 62892 CVE-2006-4253 ADV-2006-3748  View
327040 62892 CVE-2006-4253 ADV-2007-1198  View
327041 62892 CVE-2006-4253 ADV-2008-0083  View
327042 62892 CVE-2006-4253 SSRT061181  View
327043 62892 CVE-2006-4253 https://bugzilla.mozilla.org/show_bug.cgi?id=348514  View
327044 62892 CVE-2006-4253 https://issues.rpath.com/browse/RPL-640  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58360 JVNDB-2006-000556 Mozilla 製品の並列処理に関するメモリ破壊の脆弱性 Mozilla 製品には、並列処理に関する脆弱性が存在します。本脆弱性の詳細は不明ですが、JavaScript 実行の特定のタイミングに依存してメモリ破壊を引き起こされる可能性があります。 CVE-2006-4253 20355 CVE-2006-4253 62892 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000556.html 2006-09-14 2007-04-01 View