CVE-2006-4566
Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a buffer over-read.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2006-09-15
- Last modified
- 2024-08-07
Affected products
References
- http://secunia.com/advisories/21906
- http://secunia.com/advisories/21915
- http://secunia.com/advisories/21916
- http://secunia.com/advisories/21939
- http://secunia.com/advisories/21940
- http://secunia.com/advisories/21949
- http://secunia.com/advisories/21950
- http://secunia.com/advisories/22001
- http://secunia.com/advisories/22025
- http://secunia.com/advisories/22036
- http://secunia.com/advisories/22055
- http://secunia.com/advisories/22056
- http://secunia.com/advisories/22066
- http://secunia.com/advisories/22074
- http://secunia.com/advisories/22088
- http://secunia.com/advisories/22195
- http://secunia.com/advisories/22210
- http://secunia.com/advisories/22247
- http://secunia.com/advisories/22274
- http://secunia.com/advisories/22299
- http://secunia.com/advisories/22391
- http://secunia.com/advisories/22422
- http://secunia.com/advisories/22849
- http://secunia.com/advisories/24711
- http://security.gentoo.org/glsa/glsa-200609-19.xml
- http://security.gentoo.org/glsa/glsa-200610-01.xml
- http://security.gentoo.org/glsa/glsa-200610-04.xml
- http://securitytracker.com/id?1016846
- http://securitytracker.com/id?1016847
