Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) "anonymous box selectors outside of UA stylesheets," (5) stale references to "removed nodes," and (6) running the crypto.generateCRMFRequest callback on deleted context.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1161-1 | New Mozilla Firefox packages fix several vulnerabilities |
Debian DSA |
DSA-1161-2 | New Mozilla Firefox packages fix several vulnerabilities |
Ubuntu USN |
USN-327-1 | firefox vulnerabilities |
Ubuntu USN |
USN-329-1 | Thunderbird vulnerabilities |
Ubuntu USN |
USN-350-1 | Thunderbird vulnerabilities |
Ubuntu USN |
USN-361-1 | Mozilla vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T18:48:38.197Z
Reserved: 2006-07-24T00:00:00
Link: CVE-2006-3811
No data.
Status : Deferred
Published: 2006-07-27T20:04:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2006-3811
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
Ubuntu USN