19802Third-party advisory
http://secunia.com/advisories/19802 CVE-2006-1993
Mozilla Firefox 1.5.0.2 - 'js320.dll/xpcom_core.dll' Denial of Service (PoC)
Record summary
CVE-2006-1993 has a selected CVSS score of 5.1; EIP currently links 1 catalogued exploit.
Description
Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller context object. NOTE: this was originally claimed to be a buffer overflow in (1) js320.dll and (2) xpcom_core.dll, but the vendor disputes this claim.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMozilla Firefox 1.5.0.2 - 'js320.dll/xpcom_core.dll' Denial of Service (PoC)ExploitDB exploitby splicesNot analyzed1 file
References
Showing 12 of 2520015Third-party advisory
http://secunia.com/advisories/20015 20019Third-party advisory
http://secunia.com/advisories/20019 20070Third-party advisory
http://secunia.com/advisories/20070 20214Third-party advisory
http://secunia.com/advisories/20214 22066Third-party advisory
http://secunia.com/advisories/22066 780Third-party advisory
http://securityreason.com/securityalert/780 1015981vdb entry
http://securitytracker.com/id?1015981 DSA-1053Vendor advisory
http://www.debian.org/security/2006/dsa-1053 DSA-1055Vendor advisory
http://www.debian.org/security/2006/dsa-1055 GLSA-200605-06Vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-200605-06.xml VU#866300Third-party advisory
http://www.kb.cert.org/vuls/id/866300