Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-3806

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified "string function arguments."

Published

2006-07-27T19:04:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
CWE-189

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mozilla	firefox	1.5	Yes
Application	mozilla	firefox	1.5.0.1	Yes
Application	mozilla	firefox	1.5.0.2	Yes
Application	mozilla	firefox	1.5.0.3	Yes
Application	mozilla	firefox	1.5.0.4	Yes
Application	mozilla	seamonkey	1.0	Yes
Application	mozilla	seamonkey	1.0	Yes
Application	mozilla	seamonkey	1.0.1	Yes
Application	mozilla	seamonkey	1.0.2	Yes
Application	mozilla	thunderbird	1.5	Yes
Application	mozilla	thunderbird	1.5.0.2	Yes
Application	mozilla	thunderbird	1.5.0.4	Yes

References

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc ([email protected])
http://rhn.redhat.com/errata/RHSA-2006-0609.html Vendor Advisory ([email protected])
http://secunia.com/advisories/19873 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21216 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21228 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21229 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21243 Vendor Advisory ([email protected])
http://secunia.com/advisories/21246 Vendor Advisory ([email protected])
http://secunia.com/advisories/21250 Vendor Advisory ([email protected])
http://secunia.com/advisories/21262 Vendor Advisory ([email protected])
http://secunia.com/advisories/21269 Vendor Advisory ([email protected])
http://secunia.com/advisories/21270 Vendor Advisory ([email protected])
http://secunia.com/advisories/21275 Vendor Advisory ([email protected])
http://secunia.com/advisories/21336 Vendor Advisory ([email protected])
http://secunia.com/advisories/21343 Vendor Advisory ([email protected])
http://secunia.com/advisories/21358 Vendor Advisory ([email protected])
http://secunia.com/advisories/21361 Vendor Advisory ([email protected])
http://secunia.com/advisories/21529 Vendor Advisory ([email protected])
http://secunia.com/advisories/21532 Vendor Advisory ([email protected])
http://secunia.com/advisories/21607 Vendor Advisory ([email protected])
http://secunia.com/advisories/21631 Vendor Advisory ([email protected])
http://secunia.com/advisories/21634 Vendor Advisory ([email protected])
http://secunia.com/advisories/21654 Vendor Advisory ([email protected])
http://secunia.com/advisories/21675 Vendor Advisory ([email protected])
http://secunia.com/advisories/22055 ([email protected])
http://secunia.com/advisories/22065 ([email protected])
http://secunia.com/advisories/22066 ([email protected])
http://secunia.com/advisories/22210 ([email protected])
http://secunia.com/advisories/22342 ([email protected])
http://security.gentoo.org/glsa/glsa-200608-02.xml ([email protected])
http://security.gentoo.org/glsa/glsa-200608-04.xml ([email protected])
http://securitytracker.com/id?1016586 ([email protected])
http://securitytracker.com/id?1016587 ([email protected])
http://securitytracker.com/id?1016588 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 ([email protected])
http://www.debian.org/security/2006/dsa-1159 ([email protected])
http://www.debian.org/security/2006/dsa-1160 ([email protected])
http://www.debian.org/security/2006/dsa-1161 ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml ([email protected])
http://www.kb.cert.org/vuls/id/655892 Third Party Advisory, US Government Resource ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 ([email protected])
http://www.mozilla.org/security/announce/2006/mfsa2006-50.html Vendor Advisory ([email protected])
http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0594.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0608.html Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0610.html Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0611.html Vendor Advisory ([email protected])
http://www.securityfocus.com/archive/1/441333/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/446657/100/200/threaded ([email protected])
http://www.securityfocus.com/archive/1/446657/100/200/threaded ([email protected])
http://www.securityfocus.com/archive/1/446658/100/200/threaded ([email protected])
http://www.securityfocus.com/archive/1/446658/100/200/threaded ([email protected])
http://www.securityfocus.com/bid/19181 Patch ([email protected])
http://www.ubuntu.com/usn/usn-350-1 ([email protected])
http://www.ubuntu.com/usn/usn-354-1 ([email protected])
http://www.ubuntu.com/usn/usn-361-1 ([email protected])
http://www.us-cert.gov/cas/techalerts/TA06-208A.html US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2006/2998 ([email protected])
http://www.vupen.com/english/advisories/2006/3748 ([email protected])
http://www.vupen.com/english/advisories/2006/3749 ([email protected])
http://www.vupen.com/english/advisories/2007/0058 ([email protected])
http://www.vupen.com/english/advisories/2008/0083 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/27987 ([email protected])
https://issues.rpath.com/browse/RPL-536 ([email protected])
https://issues.rpath.com/browse/RPL-537 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232 ([email protected])
https://usn.ubuntu.com/327-1/ ([email protected])
https://usn.ubuntu.com/329-1/ ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2006-0609.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19873 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21216 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21228 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21229 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21243 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21246 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21250 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21262 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21269 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21270 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21275 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21336 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21343 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21358 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21361 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21529 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21532 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21607 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21631 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21634 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21654 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21675 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22055 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22065 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22066 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22210 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22342 (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200608-02.xml (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200608-04.xml (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016586 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016587 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016588 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1159 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1160 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1161 (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/655892 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/2006/mfsa2006-50.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0594.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0608.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0610.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0611.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/441333/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446657/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446657/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446658/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/446658/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/19181 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-350-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-354-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-361-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA06-208A.html US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/2998 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3748 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3749 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0058 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0083 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/27987 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-536 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-537 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232 (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/327-1/ (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/329-1/ (af854a3a-2127-422b-91ae-364da2661108)