Cloudanix VulnDB

CVE-2006-4253

None

CVSS

—

EPSS

15.2%

Published

Aug 21, 2006

CISA due date

—

The record

Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.

Affected packages

Ecosystem Package Introduced Fixed
Debian:10 thunderbird 0 1.5.0.7-1
Debian:11 thunderbird 0 1.5.0.7-1
Debian:12 thunderbird 0 1.5.0.7-1
Debian:13 thunderbird 0 1.5.0.7-1
Red Hat:enterprise_linux:3::as seamonkey 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-chat 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-debuginfo 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-dom-inspector 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-js-debugger 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-mail 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-nspr 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-nspr-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-nss 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::as seamonkey-nss-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-chat 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-debuginfo 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-dom-inspector 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-js-debugger 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-mail 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-nspr 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-nspr-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-nss 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::desktop seamonkey-nss-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-chat 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-debuginfo 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-dom-inspector 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-js-debugger 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-mail 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-nspr 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-nspr-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-nss 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::es seamonkey-nss-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-chat 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-debuginfo 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-dom-inspector 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-js-debugger 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-mail 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-nspr 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-nspr-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-nss 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:3::ws seamonkey-nss-devel 0 0:1.0.5-0.1.el3
Red Hat:enterprise_linux:4::as devhelp 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::as devhelp-debuginfo 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::as devhelp-devel 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::as firefox 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::as firefox-debuginfo 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::as seamonkey 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::as seamonkey-chat 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::as seamonkey-debuginfo 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::as seamonkey-devel 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::as seamonkey-dom-inspector 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::as seamonkey-js-debugger 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::as seamonkey-mail 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::as thunderbird 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::as thunderbird-debuginfo 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::desktop devhelp 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::desktop devhelp-debuginfo 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::desktop devhelp-devel 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::desktop firefox 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::desktop firefox-debuginfo 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::desktop seamonkey 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::desktop seamonkey-chat 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::desktop seamonkey-debuginfo 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::desktop seamonkey-devel 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::desktop seamonkey-dom-inspector 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::desktop seamonkey-js-debugger 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::desktop seamonkey-mail 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::desktop thunderbird 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::desktop thunderbird-debuginfo 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::es devhelp 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::es devhelp-debuginfo 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::es devhelp-devel 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::es firefox 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::es firefox-debuginfo 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::es seamonkey 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::es seamonkey-chat 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::es seamonkey-debuginfo 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::es seamonkey-devel 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::es seamonkey-dom-inspector 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::es seamonkey-js-debugger 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::es seamonkey-mail 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::es thunderbird 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::es thunderbird-debuginfo 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::ws devhelp 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::ws devhelp-debuginfo 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::ws devhelp-devel 0 0:0.10-0.4.el4
Red Hat:enterprise_linux:4::ws firefox 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::ws firefox-debuginfo 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::ws seamonkey 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::ws seamonkey-chat 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::ws seamonkey-debuginfo 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::ws seamonkey-devel 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::ws seamonkey-dom-inspector 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::ws seamonkey-js-debugger 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::ws seamonkey-mail 0 0:1.0.5-0.1.el4
Red Hat:enterprise_linux:4::ws thunderbird 0 0:1.5.0.7-0.1.el4
Red Hat:enterprise_linux:4::ws thunderbird-debuginfo 0 0:1.5.0.7-0.1.el4

Related vulnerabilities