Mozilla Firefox/Thunderbird/Seamonkey Multiple Remote Vulnerabilities

BID:20042

CVE-2006-4565 | CVE-2006-4566 | CVE-2006-4567 | CVE-2006-4568 | CVE-2006-4569 | CVE-2006-4570 | CVE-2006-4571 |

Info

Mozilla Firefox/Thunderbird/Seamonkey Multiple Remote Vulnerabilities

Bugtraq ID: 20042
Class: Unknown
CVE: CVE-2006-4565
CVE-2006-4566
CVE-2006-4567
CVE-2006-4568
CVE-2006-4569
CVE-2006-4570
CVE-2006-4571
Remote: Yes
Local: No
Published: Sep 15 2006 12:00AM
Updated: Mar 19 2015 09:31AM
Credit: Priit Laes, CanadianGuy, Girts Folkmanis, Catalin Patulea, Jon Oberheide, shutdown, Georgi Guninski, Bernd Mielke, Igor Bukanov, Jesse Ruderman, Martijn Wargers, Mats Palmgren, Olli Pettay, and Weston Carloss are credited with reporting these vulnerabiliti
Vulnerable: Ubuntu Ubuntu Linux 5.10 sparc
Ubuntu Ubuntu Linux 5.10 powerpc
Ubuntu Ubuntu Linux 5.10 i386
Ubuntu Ubuntu Linux 5.10 amd64
Ubuntu Ubuntu Linux 5.0 4 powerpc
Ubuntu Ubuntu Linux 5.0 4 i386
Ubuntu Ubuntu Linux 5.0 4 amd64
Ubuntu Ubuntu Linux 6.06 LTS sparc
Ubuntu Ubuntu Linux 6.06 LTS powerpc
Ubuntu Ubuntu Linux 6.06 LTS i386
Ubuntu Ubuntu Linux 6.06 LTS amd64
SuSE SUSE Linux Enterprise Server 10
SuSE SUSE Linux Enterprise Desktop 10
Slackware Linux 10.2
Slackware Linux -current
SGI Advanced Linux Environment 3.0
S.u.S.E. Linux Professional 10.0
S.u.S.E. Linux Professional 9.3
S.u.S.E. Linux Professional 9.2
S.u.S.E. Linux Professional 10.1
S.u.S.E. Linux Personal 10.0 OSS
S.u.S.E. Linux Personal 9.3
S.u.S.E. Linux Personal 9.2
S.u.S.E. Linux Personal 10.1
rPath rPath Linux 1
RedHat Enterprise Linux WS 4
RedHat Enterprise Linux WS 3
RedHat Enterprise Linux WS 2.1 IA64
RedHat Enterprise Linux WS 2.1
RedHat Enterprise Linux ES 4
RedHat Enterprise Linux ES 3
RedHat Enterprise Linux ES 2.1 IA64
RedHat Enterprise Linux ES 2.1
RedHat Desktop 4.0
RedHat Desktop 3.0
RedHat Advanced Workstation for the Itanium Processor 2.1 IA64
RedHat Advanced Workstation for the Itanium Processor 2.1
Red Hat Enterprise Linux AS 4
Red Hat Enterprise Linux AS 3
Red Hat Enterprise Linux AS 2.1 IA64
Red Hat Enterprise Linux AS 2.1
Novell Linux Desktop 9
Netscape Browser 8.1.2
Netscape Browser 8.0.4
Netscape Browser 8.0.3 .3
Netscape Browser 8.0.1
Netscape Browser 8.1
Netscape Browser 8.0
Mozilla Thunderbird 1.5 beta 2
Mozilla Thunderbird 1.5
Mozilla Thunderbird 1.0.8
Mozilla Thunderbird 1.0.7
Mozilla Thunderbird 1.0.6
Mozilla Thunderbird 1.0.5
Mozilla Thunderbird 1.0.2
Mozilla Thunderbird 1.0.1
Mozilla Thunderbird 1.0
Mozilla Thunderbird 0.9
Mozilla Thunderbird 0.8
Mozilla Thunderbird 0.7.3
Mozilla Thunderbird 0.7.2
Mozilla Thunderbird 0.7.1
Mozilla Thunderbird 0.7
Mozilla Thunderbird 0.6
Mozilla Thunderbird 1.5.0.5
Mozilla Thunderbird 1.5.0.4
Mozilla Thunderbird 1.5.0.2
Mozilla Thunderbird 1.5.0.1
Mozilla SeaMonkey 1.0.3
Mozilla SeaMonkey 1.0.2
Mozilla SeaMonkey 1.0.1
Mozilla SeaMonkey 1.0 dev
Mozilla SeaMonkey 1.0
Mozilla Firefox 1.5 beta 2
Mozilla Firefox 1.5 beta 1
Mozilla Firefox 1.5
Mozilla Firefox 1.0.8
Mozilla Firefox 1.0.7
Mozilla Firefox 1.0.6
Mozilla Firefox 1.0.5
Mozilla Firefox 1.0.4
Mozilla Firefox 1.0.3
Mozilla Firefox 1.0.2
+ Mandriva Linux Mandrake 10.2 x86_64
 + Mandriva Linux Mandrake 10.2
+ Mandriva Linux Mandrake 10.2
+ Red Hat Enterprise Linux AS 4
 + Red Hat Enterprise Linux AS 4
 + RedHat Desktop 4.0
+ RedHat Desktop 4.0
+ RedHat Enterprise Linux ES 4
 + RedHat Enterprise Linux ES 4
 + RedHat Enterprise Linux WS 4
 + RedHat Enterprise Linux WS 4
 Mozilla Firefox 1.0.1
+ Red Hat Fedora Core3
 Mozilla Firefox 1.0
Mozilla Firefox 0.10.1
Mozilla Firefox 0.10
Mozilla Firefox 0.9.3
Mozilla Firefox 0.9.2
Mozilla Firefox 0.9.1
Mozilla Firefox 0.9 rc
Mozilla Firefox 0.9
Mozilla Firefox 0.8
Mozilla Firefox Preview Release
Mozilla Firefox 2.0 beta 1
Mozilla Firefox 1.5.0.6
Mozilla Firefox 1.5.0.5
Mozilla Firefox 1.5.0.4
Mozilla Firefox 1.5.0.3
Mozilla Firefox 1.5.0.2
Mozilla Firefox 1.5.0.1
Mozilla Camino 1.0.2
Mozilla Camino 1.0.1
Mozilla Camino 0.8.4
Mozilla Camino 0.8.3
Mozilla Camino 0.8
Mozilla Camino 0.7 .0
Mozilla Camino 1.0
Mandriva Linux Mandrake 2006.0 x86_64
Mandriva Linux Mandrake 2006.0
MandrakeSoft Corporate Server 4.0 x86_64
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
MandrakeSoft Corporate Server 4.0
HP HP-UX B.11.23
HP HP-UX B.11.11
GNOME Epiphany 1.6.5
+ Red Hat Fedora Core4
 Gentoo Linux
Galeon Galeon Browser 1.3.21
Debian Linux 3.1 sparc
Debian Linux 3.1 s/390
Debian Linux 3.1 ppc
Debian Linux 3.1 mipsel
Debian Linux 3.1 mips
Debian Linux 3.1 m68k
Debian Linux 3.1 ia-64
Debian Linux 3.1 ia-32
Debian Linux 3.1 hppa
Debian Linux 3.1 arm
Debian Linux 3.1 amd64
Debian Linux 3.1 alpha
Debian Linux 3.1
Avaya Messaging Storage Server MM3.0
Avaya Interactive Response
Avaya Integrated Management
Avaya CVLAN
Not Vulnerable: Netscape Browser 8.1.3
Mozilla Thunderbird 1.5.0.7
Mozilla SeaMonkey 1.0.5
Mozilla Firefox 1.5.0.7
Mozilla Camino 1.0.3

Discussion

Mozilla Firefox/Thunderbird/Seamonkey Multiple Remote Vulnerabilities

The Mozilla Foundation has released six security advisories specifying vulnerabilities in Mozilla Firefox, SeaMonkey, and Thunderbird.

These vulnerabilities allow attackers to:

- execute arbitrary code
- perform cross-site scripting attacks
- supply malicious data through updates
- inject arbitrary content
- execute arbitrary JavaScript
- crash affected applications and potentially execute arbitrary code.

Other attacks may also be possible.

The issues described here will be split into individual BIDs as more information becomes available.

These issues are fixed in:

- Mozilla Firefox version 1.5.0.7
- Mozilla Thunderbird version 1.5.0.7
- Mozilla SeaMonkey version 1.0.5

Exploit / POC

Mozilla Firefox/Thunderbird/Seamonkey Multiple Remote Vulnerabilities

Some of the vulnerabilities described in this BID do not require exploits.

Proof-of-concept exploits are available in the Mozilla Bugzilla database, but they are not currently available to the general public.

Solution / Fix

Mozilla Firefox/Thunderbird/Seamonkey Multiple Remote Vulnerabilities

Solution:
New versions of Firefox, SeaMonkey, and Thunderbird are available to address these issues. Most Mozilla applications have self-updating features that may be used to download and install fixes.

Please see the referenced advisories for information on obtaining and applying fixes.


Mozilla Firefox 1.5.0.3

Mozilla Thunderbird 1.5.0.5

Netscape Browser 8.0

Mozilla Firefox 1.5.0.2

Mozilla Firefox 1.5.0.1

Mozilla Thunderbird 1.5.0.4

Mozilla Thunderbird 1.5.0.2

Netscape Browser 8.1

Mozilla Firefox 1.5.0.6

Mozilla SeaMonkey 1.0 dev

Mozilla SeaMonkey 1.0

Mozilla Firefox 1.5.0.4

Mozilla Firefox Preview Release

Mozilla Firefox 0.10.1

Mozilla Thunderbird 0.7

Mozilla Thunderbird 0.7.2

Mozilla Thunderbird 0.7.3

Mozilla Firefox 0.8

Mozilla Thunderbird 0.8

Mozilla Firefox 0.9

Mozilla Firefox 0.9 rc

Mozilla SeaMonkey 1.0.1

Mozilla Firefox 1.0.1

Mozilla Thunderbird 1.0.1

Mozilla SeaMonkey 1.0.2

Mozilla Firefox 1.0.2

Mozilla Firefox 1.0.4

Mozilla Firefox 1.0.5

Mozilla Thunderbird 1.0.5

Mozilla Firefox 1.0.7

Mozilla Firefox 1.5 beta 2

Mozilla Thunderbird 1.5

Mozilla Thunderbird 1.5 beta 2

GNOME Epiphany 1.6.5

Netscape Browser 8.0.1

Netscape Browser 8.0.4

Netscape Browser 8.1.2

References

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report