CVE-2006-6502

Published: Dec 20, 2006Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) via unknown vectors.

Affected (54)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

54 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 2.0 beta_1
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 beta
Mozilla Thunderbird	Version 0.1
Mozilla Thunderbird	Version 0.2
Mozilla Thunderbird	Version 0.3
Mozilla Thunderbird	Version 0.4
Mozilla Thunderbird	Version 0.5
Mozilla Thunderbird	Version 0.6
Mozilla Thunderbird	Version 0.7.1
Mozilla Thunderbird	Version 0.7.2
Mozilla Thunderbird	Version 0.7.3
Mozilla Thunderbird	Version 0.7
Mozilla Thunderbird	Version 0.8
Mozilla Thunderbird	Version 0.9
Mozilla Thunderbird	Version 1.0.1
Mozilla Thunderbird	Version 1.0.2
Mozilla Thunderbird	Version 1.0.3
Mozilla Thunderbird	Version 1.0.4
Mozilla Thunderbird	Version 1.0.5
Mozilla Thunderbird	Version 1.0.5 beta
Mozilla Thunderbird	Version 1.0.6
Mozilla Thunderbird	Version 1.0.7
Mozilla Thunderbird	Version 1.0.8
Mozilla Thunderbird	Version 1.0
Mozilla Thunderbird	Version 1.5.0.1
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.3
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.0.6
Mozilla Thunderbird	Version 1.5.0.7
Mozilla Thunderbird	Version 1.5.0.8
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 1.5 beta2

References (106)

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc (unsafe URL)

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2297

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2338

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0758.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0759.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0760.html

Source: secalert@redhat.com

http://secunia.com/advisories/23282

Source: secalert@redhat.com

http://secunia.com/advisories/23420

Source: secalert@redhat.com

http://secunia.com/advisories/23422

Source: secalert@redhat.com

http://secunia.com/advisories/23433

Source: secalert@redhat.com

http://secunia.com/advisories/23439

Source: secalert@redhat.com

http://secunia.com/advisories/23440

Source: secalert@redhat.com

http://secunia.com/advisories/23468

Source: secalert@redhat.com

http://secunia.com/advisories/23514

Source: secalert@redhat.com

http://secunia.com/advisories/23545

Source: secalert@redhat.com

http://secunia.com/advisories/23589

Source: secalert@redhat.com

http://secunia.com/advisories/23591

Source: secalert@redhat.com

http://secunia.com/advisories/23598

Source: secalert@redhat.com

http://secunia.com/advisories/23601

Source: secalert@redhat.com

http://secunia.com/advisories/23614

Source: secalert@redhat.com

http://secunia.com/advisories/23618

Source: secalert@redhat.com

http://secunia.com/advisories/23672

Source: secalert@redhat.com

http://secunia.com/advisories/23692

Source: secalert@redhat.com

http://secunia.com/advisories/23988

Source: secalert@redhat.com

http://secunia.com/advisories/24078

Source: secalert@redhat.com

http://secunia.com/advisories/24390

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200701-02.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1017411

Source: secalert@redhat.com

http://securitytracker.com/id?1017412

Source: secalert@redhat.com

http://securitytracker.com/id?1017413

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1253

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1258

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1265

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/428500

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:010

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:011

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2006/mfsa2006-71.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_80_mozilla.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_06_mozilla.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/455145/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/455728/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/21668

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-398-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-398-2

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-400-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA06-354A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2006/5068

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-883

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9626

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc (unsafe URL)