CVE-2006-3811

Mozilla Firefox, Thunderbird, and SeaMonkey - Remote Code Execution via JavaScript Memory Corruption

Title source: llm
STIX 2.1

Description

Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) "anonymous box selectors outside of UA stylesheets," (5) stale references to "removed nodes," and (6) running the crypto.generateCRMFRequest callback on deleted context.

References (65)

Core 65
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1161
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19181
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA06-208A.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21529
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21216
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0610.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0611.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21243
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0608.html
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200608-02.xml
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:145
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3748
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22055
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2998
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-361-1
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/441333/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0594.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21336
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3749
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016588
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/329-1/
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2350
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:146
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2006-0609.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22210
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27992
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21607
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016586
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19873
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21262
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21532
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21270
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0083
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/327-1/
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21361
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21631
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/446658/100/200/threaded
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/446657/100/200/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21275
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21246
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21229
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21675
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016587
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21228
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21250
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-350-1
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22342
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21358
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-536
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-537
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22066
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21269
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200608-04.xml
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21343
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9934
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25839
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22065
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/527676
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-354-1
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc

Scores

EPSS 0.0747
EPSS Percentile 93.8%

Details

Status published
Products (11)
mozilla/firefox 1.5
mozilla/firefox 1.5.0.1
mozilla/firefox 1.5.0.2
mozilla/firefox 1.5.0.3
mozilla/firefox 1.5.0.4
mozilla/seamonkey 1.0 (2 CPE variants)
mozilla/seamonkey 1.0.1
mozilla/seamonkey 1.0.2
mozilla/thunderbird 1.5
mozilla/thunderbird 1.5.0.2
... and 1 more
Published Jul 27, 2006
Tracked Since Feb 18, 2026