CVSS: 7.4EPSS: 5%CPEs: 4EXPL: 0CVE-2006-4340
https://notcve.org/view.php?id=CVE-2006-4340
15 Sep 2006 — Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fi... • ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 9%CPEs: 3EXPL: 0CVE-2006-4565
https://notcve.org/view.php?id=CVE-2006-4565
15 Sep 2006 — Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier." Desbordamiento de bufer en Mozilla Firefox anterior a 1.5.0.7, Thunderbird anterior 1.5.0.7, y SeaMonkey anterior 1.0.5 permite a un atacante remoto provocar denegación de servicio (crash) y la posibilidad de ejecutar código de su el... • ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 19%CPEs: 3EXPL: 0CVE-2006-4566
https://notcve.org/view.php?id=CVE-2006-4566
15 Sep 2006 — Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a buffer over-read. Mozilla Firefox anterior a 1.5.0.7, Thunderbird anterior 1.5.0.7, y SeaMonkey anterior 1.0.5 permite a atacantes remotos provocar denegación de servicio(crash) a través de expresiones regulares mal formadas JavaScr... • ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc •
CVSS: 9.8EPSS: 13%CPEs: 21EXPL: 0CVE-2006-3812 – vulnerabilities: CVE-2006-{3113,3677,3801-3812}
https://notcve.org/view.php?id=CVE-2006-3812
29 Jul 2006 — Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links. Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a1.5.0.5, y SeaMonkey anterior a 1.0.3 permite a atacantes remotos referenciar archivos remotos y posiblemente cargar chrome: URLs engañando al usuario en acoplamientos de copiado o arrastrando enlaces. • ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc •
CVSS: 9.8EPSS: 27%CPEs: 12EXPL: 0CVE-2006-3113
https://notcve.org/view.php?id=CVE-2006-3113
27 Jul 2006 — Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption. Mozilla Firefox 1.5 anterior a 1.5.0.5, Thunderbird anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 permite a atacantes remotos provocar denegación de servicio (caida) y posiblemente ejecutar código de su ele... • ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc •
CVSS: 9.8EPSS: 27%CPEs: 9EXPL: 0CVE-2006-3801
https://notcve.org/view.php?id=CVE-2006-3801
27 Jul 2006 — Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code. Mozilla Firefox 1.5 anterior a 1.5.0.5 y SeaMonkey anterior a 1.0.3 no limpia de forma adecuada una referencia JavaScript a un frame o window, lo caul deja un punterio a un objeto borrado que permite a atacantes remotos ejecutar código nativo de su elección. • ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc •
CVSS: 6.1EPSS: 3%CPEs: 12EXPL: 0CVE-2006-3802
https://notcve.org/view.php?id=CVE-2006-3802
27 Jul 2006 — Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object. Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a1.5.0.5, y SeaMonkey anterior a 1.0.3 permite a atacantes remotos secuestrar metodos DOM nativos desde objetos en otros dominios y conducir ataques de secuencias de comandos en sitios cruzados ... • ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc •
CVSS: 9.8EPSS: 23%CPEs: 12EXPL: 0CVE-2006-3805
https://notcve.org/view.php?id=CVE-2006-3805
27 Jul 2006 — The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. El motor Javascript en Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 prodría permitir a atacantes remoto ejecutar código de su elección a través de vectores que afectan al colector de ... • ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc •
CVSS: 9.8EPSS: 2%CPEs: 9EXPL: 0CVE-2006-3808
https://notcve.org/view.php?id=CVE-2006-3808
27 Jul 2006 — Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object. Mozilla Firefox anterior a 1.5.0.5 y SeaMonkey anterior a 1.0.3 permite a servidores remotos Proxy AutoConfig (PAC) ejecutar código con privilegios elevados a través de secuencias de comandos PAC que asignan la función FindProxyForURL a un método eval sobre un objeto pr... • ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc •
CVSS: 9.8EPSS: 3%CPEs: 12EXPL: 0CVE-2006-3809
https://notcve.org/view.php?id=CVE-2006-3809
27 Jul 2006 — Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context. Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 permite secuencias de comandos con el privilegio UniversalBrowserRead obtener privilegios UniversalXPConnect y posiblemente ejecutar código u obte... • ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc •