NVD

Id
65044  
Name
CVE-2006-6499  
Description
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-12-19  
Modified Date
2011-03-07  
Seq
2006-6499  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339546 65044 CVE-2006-6499 SSRT061181  View
339547 65044 CVE-2006-6499 GLSA-200701-02  View
339548 65044 CVE-2006-6499 1017398  View
339549 65044 CVE-2006-6499 1017405  View
339550 65044 CVE-2006-6499 1017406  View
339551 65044 CVE-2006-6499 102846  View
339552 65044 CVE-2006-6499 DSA-1253  View
339553 65044 CVE-2006-6499 DSA-1258  View
339554 65044 CVE-2006-6499 DSA-1265  View
339555 65044 CVE-2006-6499 GLSA-200701-04  View
339556 65044 CVE-2006-6499 VU#427972  View
339557 65044 CVE-2006-6499 http://www.mozilla.org/security/announce/2006/mfsa2006-68.html  View
339558 65044 CVE-2006-6499 SUSE-SA:2006:080  View
339559 65044 CVE-2006-6499 SUSE-SA:2007:006  View
339560 65044 CVE-2006-6499 21668  View
339561 65044 CVE-2006-6499 USN-398-1  View
339562 65044 CVE-2006-6499 USN-398-2  View
339563 65044 CVE-2006-6499 USN-400-1  View
339564 65044 CVE-2006-6499 TA06-354A  View
339565 65044 CVE-2006-6499 ADV-2006-5068  View
339566 65044 CVE-2006-6499 ADV-2007-1124  View
339567 65044 CVE-2006-6499 ADV-2008-0083  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58644 JVNDB-2006-000840 Mozilla 製品の js_dtoa() 関数におけるメモリ破壊の脆弱性 Mozilla 製品には、特定のプラグインの読み込みによって CPU のフローティングポイントの精度が落ちる際に js_dtoa() 関数が終了せず、メモリ領域を上書きしてしまう脆弱性が存在します。 CVE-2006-6499 22601 CVE-2006-6499 65044 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000840.html 2006-12-19 2007-04-01 View