CVE-2006-3677
EXPLOITEDMozilla Firefox <1.5.0.5 & SeaMonkey <1.0.3 - RCE
Title source: llmExploitation Summary
CVE-2006-3677 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, H D Moore, hdm, including a Metasploit module exploits/multi/browser/mozilla_navigatorjava.
AI-analyzed exploit summary This Metasploit module exploits a code execution vulnerability in Mozilla Suite/Firefox by leveraging the Java plugin to trigger a memory corruption issue via the navigator object. It generates a malicious HTML page that, when loaded, executes arbitrary shellcode.
Description
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
Exploits (4)
This Metasploit module exploits a code execution vulnerability in Mozilla Suite/Firefox by leveraging the Java plugin to trigger a memory corruption issue via the navigator object. It generates a malicious HTML page that, when loaded, executes arbitrary shellcode.
This is a functional proof-of-concept exploit for CVE-2006-3677, targeting Firefox <= 1.5.0.4. It leverages a JavaScript navigator object vulnerability to execute arbitrary code via shellcode tailored for Windows, Linux, and macOS (PPC/Intel).
This Metasploit module exploits a code execution vulnerability in Mozilla Suite/Firefox by leveraging the Java plugin to trigger a memory corruption via the Navigator object. It generates a malicious HTML page that, when loaded, executes shellcode to achieve remote code execution.
This Metasploit module exploits a code execution vulnerability in Mozilla Suite/Firefox by leveraging the Java plugin to trigger a memory corruption issue. It generates a malicious HTML page that, when loaded, executes shellcode via a crafted Java reflection call.