CVE-2006-3811 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2006-3811
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-3811

Description: Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) "anonymous box selectors outside of UA stylesheets," (5) stale references to "removed nodes," and (6) running the crypto.generateCRMFRequest callback on deleted context.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/27992 UBUNTU http://www.ubuntu.com/usn/usn-361-1 http://www.ubuntu.com/usn/usn-350-1 http://www.ubuntu.com/usn/usn-354-1 http://www.ubuntulinux.org/support/documentation/usn/usn-329-1 http://www.ubuntulinux.org/support/documentation/usn/usn-327-1 SUSE http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1 ST 1016588 1016587 1016586 SGI SAID Secunia Advisory: SA22055 Secunia Advisory: SA21675 Secunia Advisory: SA21631 Secunia Advisory: SA21607 Secunia Advisory: SA21532 Secunia Advisory: SA21529 Secunia Advisory: SA21343 Secunia Advisory: SA21262 Secunia Advisory: SA21250 Secunia Advisory: SA21361 Secunia Advisory: SA21358 Secunia Advisory: SA21336 Secunia Advisory: SA21275 Secunia Advisory: SA21270 Secunia Advisory: SA21269 Secunia Advisory: SA21243 Secunia Advisory: SA21246 Secunia Advisory: SA21229 Secunia Advisory: SA21228 Secunia Advisory: SA21216 Secunia Advisory: SA19873 Secunia Advisory: SA22210 Secunia Advisory: SA22342 Secunia Advisory: SA22065 Secunia Advisory: SA22066 Secunia Advisory: SA25839 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0594.html http://rhn.redhat.com/errata/RHSA-2006-0609.html http://www.redhat.com/support/errata/RHSA-2006-0611.html http://www.redhat.com/support/errata/RHSA-2006-0610.html http://www.redhat.com/support/errata/RHSA-2006-0608.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9934 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 HP http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded http://www.securityfocus.com/archive/1/archive/1/446658/100/200/threaded GENTOO http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml http://security.gentoo.org/glsa/glsa-200608-04.xml http://security.gentoo.org/glsa/glsa-200608-02.xml DEBIAN http://www.debian.org/security/2006/dsa-1161 CONFIRM http://www.mozilla.org/security/announce/2006/mfsa2006-55.html CERT-VN 527676 CERT http://www.us-cert.gov/cas/techalerts/TA06-208A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/441333/100/0/threaded BID 19181

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability