Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-1728

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to the crypto.generateCRMFRequest method.

Published

2006-04-14T10:02:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mozilla	firefox	< 1.0.8	Yes
Application	mozilla	firefox	< 1.5.0.2	Yes
Application	mozilla	mozilla_suite	< 1.7.13	Yes
Application	mozilla	seamonkey	< 1.0.1	Yes
Application	mozilla	thunderbird	< 1.0.8	Yes
Application	mozilla	thunderbird	< 1.5.0.2	Yes
Operating System	canonical	ubuntu_linux	4.10	Yes
Operating System	canonical	ubuntu_linux	5.04	Yes
Operating System	canonical	ubuntu_linux	5.10	Yes

References

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt Broken Link ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc Broken Link ([email protected])
http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html Broken Link ([email protected])
http://secunia.com/advisories/19631 Third Party Advisory ([email protected])
http://secunia.com/advisories/19649 Third Party Advisory ([email protected])
http://secunia.com/advisories/19696 Third Party Advisory ([email protected])
http://secunia.com/advisories/19714 Third Party Advisory ([email protected])
http://secunia.com/advisories/19721 Third Party Advisory ([email protected])
http://secunia.com/advisories/19729 Third Party Advisory ([email protected])
http://secunia.com/advisories/19746 Third Party Advisory ([email protected])
http://secunia.com/advisories/19759 Third Party Advisory ([email protected])
http://secunia.com/advisories/19780 Third Party Advisory ([email protected])
http://secunia.com/advisories/19794 Third Party Advisory ([email protected])
http://secunia.com/advisories/19811 Third Party Advisory ([email protected])
http://secunia.com/advisories/19821 Third Party Advisory ([email protected])
http://secunia.com/advisories/19823 Third Party Advisory ([email protected])
http://secunia.com/advisories/19852 Third Party Advisory ([email protected])
http://secunia.com/advisories/19862 Third Party Advisory ([email protected])
http://secunia.com/advisories/19863 Third Party Advisory ([email protected])
http://secunia.com/advisories/19902 Third Party Advisory ([email protected])
http://secunia.com/advisories/19941 Third Party Advisory ([email protected])
http://secunia.com/advisories/19950 Third Party Advisory ([email protected])
http://secunia.com/advisories/20051 Third Party Advisory ([email protected])
http://secunia.com/advisories/21033 Third Party Advisory ([email protected])
http://secunia.com/advisories/21622 Third Party Advisory ([email protected])
http://secunia.com/advisories/22065 Third Party Advisory ([email protected])
http://secunia.com/advisories/22066 Third Party Advisory ([email protected])
http://securitytracker.com/id?1015922 Third Party Advisory, VDB Entry ([email protected])
http://securitytracker.com/id?1015923 Third Party Advisory, VDB Entry ([email protected])
http://securitytracker.com/id?1015924 Third Party Advisory, VDB Entry ([email protected])
http://securitytracker.com/id?1015925 Third Party Advisory, VDB Entry ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 Broken Link ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 Broken Link ([email protected])
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm Third Party Advisory ([email protected])
http://www.debian.org/security/2006/dsa-1044 Third Party Advisory ([email protected])
http://www.debian.org/security/2006/dsa-1046 Third Party Advisory ([email protected])
http://www.debian.org/security/2006/dsa-1051 Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml Third Party Advisory ([email protected])
http://www.kb.cert.org/vuls/id/932734 Third Party Advisory, US Government Resource ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 Third Party Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 Third Party Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 Third Party Advisory ([email protected])
http://www.mozilla.org/security/announce/2006/mfsa2006-24.html Vendor Advisory ([email protected])
http://www.novell.com/linux/security/advisories/2006_04_25.html Broken Link ([email protected])
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html Third Party Advisory ([email protected])
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0328.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0329.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0330.html Third Party Advisory ([email protected])
http://www.securityfocus.com/archive/1/434524/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/434524/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/436296/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/436338/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/438730/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/438730/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/446657/100/200/threaded ([email protected])
http://www.securityfocus.com/archive/1/446657/100/200/threaded ([email protected])
http://www.securityfocus.com/archive/1/446658/100/200/threaded ([email protected])
http://www.securityfocus.com/archive/1/446658/100/200/threaded ([email protected])
http://www.securityfocus.com/bid/17516 Third Party Advisory, VDB Entry ([email protected])
http://www.us-cert.gov/cas/techalerts/TA06-107A.html Third Party Advisory, US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2006/1356 Permissions Required, Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2006/3391 Permissions Required, Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2006/3748 Permissions Required, Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2006/3749 Permissions Required, Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2007/0058 Permissions Required, Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/0083 Permissions Required, Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/25812 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10508 Third Party Advisory ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1698 Third Party Advisory ([email protected])
https://usn.ubuntu.com/271-1/ Third Party Advisory ([email protected])
https://usn.ubuntu.com/275-1/ Third Party Advisory ([email protected])
https://usn.ubuntu.com/276-1/ Third Party Advisory ([email protected])
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt Broken Link (af854a3a-2127-422b-91ae-364da2661108)
ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19631 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19649 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19696 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19714 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19721 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19729 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19746 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19759 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19780 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19794 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19811 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19821 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19823 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19852 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19862 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19863 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19902 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19941 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19950 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/20051 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21033 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21622 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22065 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22066 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1015922 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1015923 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1015924 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1015925 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1044 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1046 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1051 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/932734 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/2006/mfsa2006-24.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_04_25.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0328.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0329.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0330.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/434524/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/434524/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/436296/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/436338/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/438730/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/438730/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446657/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446657/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446658/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446658/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/17516 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA06-107A.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/1356 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3391 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3748 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3749 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0058 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0083 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/25812 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10508 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1698 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/271-1/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/275-1/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/276-1/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)