CVE-2006-4565
Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."
- Score
- CVSS 2.0 9.3 Critical
- Status
- Modified - secalert@redhat.com
- Published
- 2006-09-15
- Last modified
- 2024-08-07
- Weaknesses
- CWE-119
Affected products
References
- http://secunia.com/advisories/21906
- http://secunia.com/advisories/21915
- http://secunia.com/advisories/21916
- http://secunia.com/advisories/21939
- http://secunia.com/advisories/21940
- http://secunia.com/advisories/21949
- http://secunia.com/advisories/21950
- http://secunia.com/advisories/22001
- http://secunia.com/advisories/22025
- http://secunia.com/advisories/22036
- http://secunia.com/advisories/22055
- http://secunia.com/advisories/22056
- http://secunia.com/advisories/22066
- http://secunia.com/advisories/22074
- http://secunia.com/advisories/22088
- http://secunia.com/advisories/22195
- http://secunia.com/advisories/22210
- http://secunia.com/advisories/22247
- http://secunia.com/advisories/22274
- http://secunia.com/advisories/22299
- http://secunia.com/advisories/22342
- http://secunia.com/advisories/22391
- http://secunia.com/advisories/22422
- http://secunia.com/advisories/22849
- http://secunia.com/advisories/24711
- http://security.gentoo.org/glsa/glsa-200609-19.xml
- http://security.gentoo.org/glsa/glsa-200610-01.xml
- http://security.gentoo.org/glsa/glsa-200610-04.xml
- http://securitytracker.com/id?1016846
