Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-5159

Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScript. NOTE: the vendor and original researchers have released a follow-up comment disputing the severity of this issue, in which the researcher states that "we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this... I have not succeeded in making this code do anything more than cause a crash and eat up system resources"

Published

2006-10-05T04:04:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox 0.8 Yes
Application mozilla firefox 0.9 Yes
Application mozilla firefox 0.9 Yes
Application mozilla firefox 0.9.1 Yes
Application mozilla firefox 0.9.2 Yes
Application mozilla firefox 0.9.3 Yes
Application mozilla firefox 0.10 Yes
Application mozilla firefox 0.10.1 Yes
Application mozilla firefox 1.0 Yes
Application mozilla firefox 1.0.1 Yes
Application mozilla firefox 1.0.2 Yes
Application mozilla firefox 1.0.3 Yes
Application mozilla firefox 1.0.4 Yes
Application mozilla firefox 1.0.5 Yes
Application mozilla firefox 1.0.6 Yes
Application mozilla firefox 1.0.7 Yes
Application mozilla firefox 1.0.8 Yes
Application mozilla firefox 1.5 Yes
Application mozilla firefox 1.5 Yes
Application mozilla firefox 1.5 Yes
Application mozilla firefox 1.5.0.1 Yes
Application mozilla firefox 1.5.0.2 Yes
Application mozilla firefox 1.5.3 Yes
Application mozilla firefox 1.5.4 Yes
Application mozilla firefox 1.5.5 Yes
Application mozilla firefox 1.5.6 Yes
Application mozilla firefox 1.5.7 Yes
Application mozilla firefox 1.5.8 Yes
Application mozilla firefox 2.0 Yes
Application mozilla firefox preview_release Yes
References