20061030 Firefox <= 2.0 crashmailing list
http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050416.html CVE-2006-5633
Mozilla Firefox 1.5.0.7/2.0 - 'createRange' Remote Denial of Service
Record summary
CVE-2006-5633 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service (crash) by creating a range object using createRange, calling selectNode on a DocType node (DOCUMENT_TYPE_NODE), then calling createContextualFragment on the range, which triggers a null dereference. NOTE: the original Bugtraq post mentioned that code execution was possible, but followup analysis has shown that it is only a null dereference.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMozilla Firefox 1.5.0.7/2.0 - 'createRange' Remote Denial of ServiceExploitDB exploitby Gotfault SecurityNot analyzed1 file
References
12gotfault.net
http://www.gotfault.net/research/advisory/gadv-firefox.txt 20061031 New Flaw in Firefox 2.0: DoS and possible remote code executionmailing list
http://www.securityfocus.com/archive/1/450155/100/0/threaded 20061031 Re: New Flaw in Firefox 2.0: DoS and possible remote code executionmailing list
http://www.securityfocus.com/archive/1/450167/100/0/threaded 20061031 Re: New Flaw in Firefox 2.0: DoS and possible remote code executionmailing list
http://www.securityfocus.com/archive/1/450168/100/0/threaded 20061101 Re: New Flaw in Firefox 2.0: DoS and possible remote code executionmailing list
http://www.securityfocus.com/archive/1/450682/100/200/threaded 20061127 Re: New Flaw in Firefox 2.0: DoS and possible remote code executionmailing list
http://www.securityfocus.com/archive/1/452803/100/0/threaded 20799vdb entry
http://www.securityfocus.com/bid/20799 bugzilla.mozilla.orgConfirmation
https://bugzilla.mozilla.org/show_bug.cgi?id=358797 bugzilla.redhat.comConfirmation
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213237 firefox-createrange-dos(29916)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29916 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-5633