CVE Vulnerabilities

CVE-2006-3805

Published: Jul 27, 2006 | Modified: Oct 17, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla 1.5 (including) 1.5 (including)
Firefox Mozilla 1.5.0.1 (including) 1.5.0.1 (including)
Firefox Mozilla 1.5.0.2 (including) 1.5.0.2 (including)
Firefox Mozilla 1.5.0.3 (including) 1.5.0.3 (including)
Firefox Mozilla 1.5.0.4 (including) 1.5.0.4 (including)
Seamonkey Mozilla 1.0 (including) 1.0 (including)
Seamonkey Mozilla 1.0.1 (including) 1.0.1 (including)
Seamonkey Mozilla 1.0.2 (including) 1.0.2 (including)
Thunderbird Mozilla 1.5 (including) 1.5 (including)
Thunderbird Mozilla 1.5.0.2 (including) 1.5.0.2 (including)
Thunderbird Mozilla 1.5.0.4 (including) 1.5.0.4 (including)
Firefox Ubuntu dapper *
Firefox-granparadiso Ubuntu devel *
Lightning-sunbird Ubuntu devel *
Midbrowser Ubuntu devel *
Mozilla-thunderbird Ubuntu dapper *
Mozilla-thunderbird Ubuntu edgy *
Mozilla-thunderbird Ubuntu feisty *
Xulrunner Ubuntu devel *
Xulrunner Ubuntu edgy *
Xulrunner Ubuntu feisty *
Red Hat Enterprise Linux 3 RedHat seamonkey-0:1.0.3-0.el3.1 *
Red Hat Enterprise Linux 4 RedHat devhelp-0:0.10-0.2.el4 *
Red Hat Enterprise Linux 4 RedHat seamonkey-0:1.0.3-0.el4.1 *
Red Hat Enterprise Linux 4 RedHat firefox-0:1.5.0.5-0.el4.1 *
Red Hat Enterprise Linux 4 RedHat thunderbird-0:1.5.0.5-0.el4.1 *
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 RedHat *
Red Hat Enterprise Linux ES version 2.1 RedHat *
Red Hat Enterprise Linux WS version 2.1 RedHat *
Red Hat Linux Advanced Workstation 2.1 RedHat *

References