CVE-2006-2788

Published: Jun 2, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.

Affected (24)

Products: Mozilla: Firefox

1 product

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version preview_release

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (46)

http://rhn.redhat.com/errata/RHSA-2006-0609.html

Source: secalert@redhat.com

http://secunia.com/advisories/21269

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21270

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21336

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21532

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21631

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22247

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22299

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22342

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22849

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2006/dsa-1192

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1210

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0578.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0594.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0610.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0611.html

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-361-1

Source: secalert@redhat.com

http://www.us.debian.org/security/2006/dsa-1191

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=321598

Source: secalert@redhat.com

ExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11065

Source: secalert@redhat.com

https://usn.ubuntu.com/296-1/

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0609.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21269

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21270

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21336

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21532

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21631

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/22247

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/22299

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/22342

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/22849

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2006/dsa-1192

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1210

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0578.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0594.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0610.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0611.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-361-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us.debian.org/security/2006/dsa-1191

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=321598

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11065

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/296-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.