CVE-2006-6505

Related Files

Debian Linux Security Advisory 1265-1

Posted Mar 14, 2007

Authored by Debian | Site debian.org

Debian Security Advisory 1265-1 - Several security related problems have been discovered in Mozilla and derived products. Several vulnerabilities in the layout engine allow remote attackers to cause a denial of service and possibly permit them to execute arbitrary code. Several vulnerabilities in the JavaScript engine allow remote attackers to cause a denial of service and possibly permit them to execute arbitrary code. A bug in the js_dtoa function allows remote attackers to cause a denial of service. "shutdown" discovered a vulnerability that allows remote attackers to gain privileges and install malicious code via the watch JavaScript function. Steven Michaud discovered a programming bug that allows remote attackers to cause a denial of service. "moz_bug_r_a4" reported that the src attribute of an IMG element could be used to inject JavaScript code. Georgi Guninski discovered several heap-based buffer overflows that allow remote attackers to execute arbitrary code.

tags | advisory, remote, denial of service, overflow, arbitrary, javascript, vulnerability

systems | linux, debian

advisories | CVE-2006-6497, CVE-2006-6498, CVE-2006-6499, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6505

SHA-256 | 30c49707966199037decb53c0e4941c6faae1ea6a5cdc8e8e657d83ce41e3144

Download | Favorite | View

Mandriva Linux Security Advisory 2007.011

Posted Jan 14, 2007

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 1.5.0.9.

tags | advisory, vulnerability

systems | linux, mandriva

advisories | CVE-2006-6497, CVE-2006-6500, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6505

SHA-256 | 0f43fb0ea8f936a8ac96a8d1144f37e78d3cce8a7251e9b4660e34bae8df6834

Download | Favorite | View

Ubuntu Security Notice 400-1

Posted Jan 5, 2007

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 400-1 - Georgi Guninski and David Bienvenu discovered that long Content-Type and RFC2047-encoded headers we vulnerable to heap overflows. By tricking the user into opening a specially crafted email, an attacker could execute arbitrary code with user privileges. Various flaws have been reported that allow an attacker to execute arbitrary code with user privileges or bypass internal XSS protections by tricking the user into opening a malicious email containing JavaScript. Please note that JavaScript is disabled by default for emails, and it is not recommended to enable it.

tags | advisory, overflow, arbitrary, javascript

systems | linux, ubuntu

advisories | CVE-2006-6497, CVE-2006-6498, CVE-2006-6499, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6505

SHA-256 | 015a784e790f410b614c4162e3919d717c4c026bdd207e69f535311938d74a48

Download | Favorite | View