CVE-2006-4310

Mozilla Firefox - Improper Input Validation

Title source: rule

Description

Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.

Exploits (1)

exploitdb STUB VERIFIED

by anonymous · perllocalnovell

https://www.exploit-db.com/exploits/28427

View Code ZIP pw:eip

References (9)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/444064/100/0/threaded

[Vendor Advisory] http://secunia.com/advisories/23235

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1225

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/19678

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1227

[Vendor Advisory] http://secunia.com/advisories/23202

[Vendor Advisory] http://secunia.com/advisories/23197

[Third Party Advisory] http://securityreason.com/securityalert/1444

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1224

Scores

EPSS 0.1577

EPSS Percentile 94.7%

Details

CWE

CWE-20

Status published

Products (1)

mozilla/firefox 1.5.0.6

Published Aug 23, 2006

Tracked Since Feb 18, 2026