CVE-2006-3677
NoneCVSS
—
EPSS
78.7%
Published
Jul 27, 2006
CISA due date
—
The record
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:3::as | seamonkey | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-chat | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-debuginfo | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-dom-inspector | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-js-debugger | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-mail | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-chat | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-debuginfo | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-dom-inspector | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-js-debugger | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-mail | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-chat | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-debuginfo | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-dom-inspector | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-js-debugger | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-mail | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-chat | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-debuginfo | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-dom-inspector | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-js-debugger | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-mail | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss-devel | 0 | 0:1.0.3-0.el3.1 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.10-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.3-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.5.0.5-0.el4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.5.0.5-0.el4.1 |
Related vulnerabilities
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects seamonkey
- CVE-2010-1205 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in… Also affects seamonkey
- CVE-2010-1199 Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before… Also affects seamonkey
- CVE-2009-0689 Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2)… Also affects seamonkey
- CVE-2009-1169 The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and… Also affects seamonkey
- CVE-2008-0016 Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before… Also affects seamonkey
- CVE-2008-2798 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird… Also affects seamonkey
- CVE-2007-2292 CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox… Also affects seamonkey