CVE-2006-4253
NoneCVSS
—
EPSS
15.2%
Published
Aug 21, 2006
CISA due date
—
The record
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | thunderbird | 0 | 1.5.0.7-1 |
| Debian:11 | thunderbird | 0 | 1.5.0.7-1 |
| Debian:12 | thunderbird | 0 | 1.5.0.7-1 |
| Debian:13 | thunderbird | 0 | 1.5.0.7-1 |
| Red Hat:enterprise_linux:3::as | seamonkey | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-chat | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-debuginfo | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-dom-inspector | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-js-debugger | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-mail | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-chat | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-debuginfo | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-dom-inspector | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-js-debugger | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-mail | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-chat | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-debuginfo | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-dom-inspector | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-js-debugger | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-mail | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-chat | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-debuginfo | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-dom-inspector | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-js-debugger | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-mail | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss-devel | 0 | 0:1.0.5-0.1.el3 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.10-0.4.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.5-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.5.0.7-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.5.0.7-0.1.el4 |
Related vulnerabilities
- CVE-2024-5696 By manipulating the text in an `input` tag, an attacker could have caused corrupt memory… Also affects thunderbird
- CVE-2024-5700 Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Also affects thunderbird
- CVE-2024-5702 Memory corruption in the networking stack could have led to a potentially exploitable… Also affects thunderbird
- CVE-2024-5693 Offscreen Canvas did not properly track cross-origin tainting, which could be used to… Also affects thunderbird
- CVE-2024-5688 If a garbage collection was triggered at the right time, a use-after-free could have… Also affects thunderbird
- CVE-2024-5691 By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have… Also affects thunderbird
- CVE-2024-5690 By monitoring the time certain operations take, an attacker could have guessed which… Also affects thunderbird
- CVE-2024-4777 Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Also affects thunderbird