CVE-2006-4565

Published: Sep 15, 2006Modified: Apr 16, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."

Affected (3)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 1.5.0.6
Mozilla Seamonkey	Up to 1.0.4
Mozilla Thunderbird	Up to 1.5.0.6

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (116)

ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc (unsafe URL)

Source: secalert@redhat.com

http://secunia.com/advisories/21906

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/21915

Source: secalert@redhat.com

http://secunia.com/advisories/21916

Source: secalert@redhat.com

http://secunia.com/advisories/21939

Source: secalert@redhat.com

http://secunia.com/advisories/21940

Source: secalert@redhat.com

http://secunia.com/advisories/21949

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/21950

Source: secalert@redhat.com

http://secunia.com/advisories/22001

Source: secalert@redhat.com

http://secunia.com/advisories/22025

Source: secalert@redhat.com

http://secunia.com/advisories/22036

Source: secalert@redhat.com

http://secunia.com/advisories/22055

Source: secalert@redhat.com

http://secunia.com/advisories/22056

Source: secalert@redhat.com

http://secunia.com/advisories/22066

Source: secalert@redhat.com

http://secunia.com/advisories/22074

Source: secalert@redhat.com

http://secunia.com/advisories/22088

Source: secalert@redhat.com

http://secunia.com/advisories/22195

Source: secalert@redhat.com

http://secunia.com/advisories/22210

Source: secalert@redhat.com

http://secunia.com/advisories/22247

Source: secalert@redhat.com

http://secunia.com/advisories/22274

Source: secalert@redhat.com

http://secunia.com/advisories/22299

Source: secalert@redhat.com

http://secunia.com/advisories/22342

Source: secalert@redhat.com

http://secunia.com/advisories/22391

Source: secalert@redhat.com

http://secunia.com/advisories/22422

Source: secalert@redhat.com

http://secunia.com/advisories/22849

Source: secalert@redhat.com

http://secunia.com/advisories/24711

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200609-19.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200610-01.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200610-04.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1016846

Source: secalert@redhat.com

http://securitytracker.com/id?1016847

Source: secalert@redhat.com

http://securitytracker.com/id?1016848

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1192

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1210

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:168

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:169

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2006/mfsa2006-57.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_54_mozilla.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0675.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0676.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2006-0677.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.securityfocus.com/archive/1/446140/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/20042

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-350-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-351-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-352-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-354-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-361-1

Source: secalert@redhat.com

http://www.us.debian.org/security/2006/dsa-1191

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3617

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3748

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1198

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/28955

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-640

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11421

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc (unsafe URL)