Page 466 of 2521 results (0.034 seconds)

CVSS: 7.1EPSS: 53%CPEs: 54EXPL: 0

CVE-2006-6502

https://notcve.org/view.php?id=CVE-2006-6502

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) via unknown vectors. Vulnerabilidad de uso después de liberación (use-after-free) en el código puente LiveConnect para Mozilla Firefox 2.x anterior a 2.0.0.1, 1.5.x anterior a 1.5.0.9, Thunderbird anterior a 1.5.0.9, y SeaMonkey anterior a 1.0.7 permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores desconocidos. • ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc http://fedoranews.org/cms/node/2297 http://fedoranews.org/cms/node/2338 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://rhn.redhat.com/errata/RHSA-2006-0758.html http://rhn.redhat.com/errata/RHSA-2006-0759.html http://rhn.redhat.com/errata/RHSA-2006-0760.html http://secunia.com/advisories/23282 http://secunia.com/advisories/23420 http://secunia.com/advisories& •

CVSS: 4.3EPSS: 1%CPEs: 1EXPL: 1

CVE-2006-6506

https://notcve.org/view.php?id=CVE-2006-6506

The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits. La característica "Feed Preview" en Mozilla Firefox 2.0 anterior a 2.0.0.1 envía la URL del feed en la petición de iconos favicon.ico, lo cual implica una debilidad en la privacidad que puede permitir a los servicios que muestran feeds determinar hábitos de navegación. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://secunia.com/advisories/23282 http://secunia.com/advisories/23545 http://secunia.com/advisories/23589 http://secunia.com/advisories/23614 http://secunia.com/advisories/23672 http://security.gentoo.org/glsa/glsa-200701-02.xml http://securitytracker.com/id?1017421 http://www.legroom.net/modules.php?op=modload&name=News&file=article&sid=215 http://www.mozilla.org/security/announce/2006/mfsa2006-75.ht •

CVSS: 6.8EPSS: 79%CPEs: 4EXPL: 0

CVE-2006-6497

https://notcve.org/view.php?id=CVE-2006-6497

Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors. Múltiples vulnerabilidades no especificadas en el motor de diseño para Mozilla Firefox 2.x anterior a 2.0.0.1, 1.5.x anterior a 1.5.0.9, Thunderbird anterior a 1.5.0.9, y SeaMonkey anterior a 1.0.7 permiten a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída) y posiblemente ejecutar código de su elección mediante vectores de ataque desconocidos. • ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc http://fedoranews.org/cms/node/2297 http://fedoranews.org/cms/node/2338 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://rhn.redhat.com/errata/RHSA-2006-0758.html http://rhn.redhat.com/errata/RHSA-2006-0759.html http://rhn.redhat.com/errata/RHSA-2006-0760.html http://secunia.com/advisories/23282 http://secunia.com/advisories/23420 http://secunia.com/advisories& •

CVSS: 6.8EPSS: 23%CPEs: 9EXPL: 0

CVE-2006-6500

https://notcve.org/view.php?id=CVE-2006-6500

Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap. Desbordamiento de búfer basado en pila en Mozilla Firefox 2.x anterior a 2.0.0.1, 1.5.x anterior a 1.5.0.9, Thunderbird anterior a 1.5.0.9, y SeaMonkey anterior a 1.0.7 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección estableciendo el cursor CSS en ciertas imágenes que provocan un cálculo erróneo de su tamaño al convertirlo a un mapa de bits de Windows. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://secunia.com/advisories/23282 http://secunia.com/advisories/23420 http://secunia.com/advisories/23422 http://secunia.com/advisories/23545 http://secunia.com/advisories/23598 http://secunia.com/advisories/23614 http://secunia.com/advisories/23672 http://secunia.com/advisories/23692 http://security.gentoo.org/glsa/glsa-200701-02.xml http://securitytracker.com/id?1017399 http://securitytracker.com/ • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 4.3EPSS: 5%CPEs: 1EXPL: 0

CVE-2006-6507

https://notcve.org/view.php?id=CVE-2006-6507

Mozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site Scripting (XSS) protection via vectors related to a Function.prototype regression error. Mozilla Firefox 2.0 anterior a 2.0.0.1 permite a atacantes remotos evitar la protección de secuencias de comandos en sitios cruzados (XSS) mediante vectores relacionados con un error de regresión de Function.prototype. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://secunia.com/advisories/23282 http://secunia.com/advisories/23545 http://secunia.com/advisories/23589 http://secunia.com/advisories/23614 http://secunia.com/advisories/23672 http://security.gentoo.org/glsa/glsa-200701-02.xml http://securitytracker.com/id?1017422 http://www.mozilla.org/security/announce/2006/mfsa2006-76.html http://www.novell.com/linux/security/advisories/2006_80_mozilla.html http:& •