CVE-2006-1530
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.77%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 4.77% probability · 91th percentile
- CISA KEV
- Not listed
- Affected
- mozilla/firefox · mozilla/seamonkey · mozilla/thunderbird · debian/debian linux
- Source
- secalert@redhat.com
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txtThird Party Advisory
- http://secunia.com/advisories/19631Third Party Advisory
- http://secunia.com/advisories/19649Third Party Advisory
- http://secunia.com/advisories/19863Third Party Advisory
- http://secunia.com/advisories/19941Third Party Advisory
- http://secunia.com/advisories/21033Third Party Advisory
- http://secunia.com/advisories/22065Third Party Advisory
- http://secunia.com/advisories/22066Third Party Advisory
- http://securitytracker.com/id?1015919Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015920Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015921Third Party Advisory, VDB Entry
- http://www.debian.org/security/2006/dsa-1046Third Party Advisory
- http://www.debian.org/security/2006/dsa-1051Third Party Advisory
- http://www.kb.cert.org/vuls/id/350262Third Party Advisory, US Government Resource
- http://www.mozilla.org/security/announce/2006/mfsa2006-20.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/archive/1/446657/100/200/threaded
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
- http://www.securityfocus.com/bid/17516Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/1356Permissions Required, Third Party Advisory
- http://www.vupen.com/english/advisories/2006/3748Permissions Required, Third Party Advisory
- http://www.vupen.com/english/advisories/2006/3749Permissions Required, Third Party Advisory
- http://www.vupen.com/english/advisories/2008/0083Permissions Required, Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=326615Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1903Third Party Advisory
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txtThird Party Advisory
- http://secunia.com/advisories/19631Third Party Advisory
- http://secunia.com/advisories/19649Third Party Advisory
- http://secunia.com/advisories/19863Third Party Advisory
- http://secunia.com/advisories/19941Third Party Advisory
- http://secunia.com/advisories/21033Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.