CVE-2006-3113

Published: Jul 27, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.

Affected (12)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5

References (122)

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)

Source: PSIRT-CNA@flexerasoftware.com

http://rhn.redhat.com/errata/RHSA-2006-0609.html

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/19873

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://secunia.com/advisories/21216

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://secunia.com/advisories/21228

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://secunia.com/advisories/21229

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://secunia.com/advisories/21243

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21246

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21250

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21262

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21269

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21270

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21275

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21336

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21343

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21358

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21361

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21529

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21532

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21607

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21631

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/22055

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/22065

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/22066

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/22210

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2006-53/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200608-02.xml

Source: PSIRT-CNA@flexerasoftware.com

http://security.gentoo.org/glsa/glsa-200608-04.xml

Source: PSIRT-CNA@flexerasoftware.com

http://securitytracker.com/id?1016586

Source: PSIRT-CNA@flexerasoftware.com

http://securitytracker.com/id?1016587

Source: PSIRT-CNA@flexerasoftware.com

http://securitytracker.com/id?1016588

Source: PSIRT-CNA@flexerasoftware.com

http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml

Source: PSIRT-CNA@flexerasoftware.com

http://www.kb.cert.org/vuls/id/239124

Source: PSIRT-CNA@flexerasoftware.com

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:146

Source: PSIRT-CNA@flexerasoftware.com

http://www.mozilla.org/security/announce/2006/mfsa2006-46.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2006-0594.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2006-0608.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2006-0610.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2006-0611.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/441330/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/441333/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/446658/100/200/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/19181

Source: PSIRT-CNA@flexerasoftware.com

Patch

http://www.securityfocus.com/bid/19197

Source: PSIRT-CNA@flexerasoftware.com

Patch

http://www.ubuntu.com/usn/usn-350-1

Source: PSIRT-CNA@flexerasoftware.com

http://www.ubuntu.com/usn/usn-354-1

Source: PSIRT-CNA@flexerasoftware.com

http://www.us-cert.gov/cas/techalerts/TA06-208A.html

Source: PSIRT-CNA@flexerasoftware.com

US Government Resource

http://www.vupen.com/english/advisories/2006/2998

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2006/3748

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2006/3749

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2008/0083

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/27982

Source: PSIRT-CNA@flexerasoftware.com

https://issues.rpath.com/browse/RPL-536

Source: PSIRT-CNA@flexerasoftware.com

https://issues.rpath.com/browse/RPL-537

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10261

Source: PSIRT-CNA@flexerasoftware.com

https://usn.ubuntu.com/327-1/

Source: PSIRT-CNA@flexerasoftware.com

https://usn.ubuntu.com/329-1/

Source: PSIRT-CNA@flexerasoftware.com

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2006-0609.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19873

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/21216

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/21228

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/21229

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/21243

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21246

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21250

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21262

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21269

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21270

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21275

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21336

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21343

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21358

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21361

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21529

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21532

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21607

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21631

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22055

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22065

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22066

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22210

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/secunia_research/2006-53/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200608-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200608-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016586

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016587

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016588

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/239124

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:146

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2006/mfsa2006-46.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0594.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0608.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0610.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0611.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/441330/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/441333/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446658/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19181

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/19197

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.ubuntu.com/usn/usn-350-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-354-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-208A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/2998

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3748

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3749

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0083

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27982

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-536

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-537

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10261

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/327-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/329-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.