Description
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/21243 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0608.html ↗
- http://security.gentoo.org/glsa/glsa-200608-02.xml ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 ↗
- http://www.vupen.com/english/advisories/2006/3748 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11501 ↗
- http://www.securityfocus.com/bid/19181 ↗
- http://www.us-cert.gov/cas/techalerts/TA06-208A.html ↗
- http://www.vupen.com/english/advisories/2006/2998 ↗
- http://www.securityfocus.com/archive/1/441333/100/0/threaded ↗
- http://secunia.com/advisories/21529 ↗
- http://secunia.com/advisories/21216 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml ↗
- http://www.redhat.com/support/errata/RHSA-2006-0594.html ↗
- http://secunia.com/advisories/21336 ↗
- http://www.vupen.com/english/advisories/2006/3749 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0610.html ↗
- http://securitytracker.com/id?1016588 ↗
- http://rhn.redhat.com/errata/RHSA-2006-0609.html ↗
- http://secunia.com/advisories/22210 ↗
- http://securitytracker.com/id?1016586 ↗
- http://secunia.com/advisories/19873 ↗
- http://secunia.com/advisories/21262 ↗
- http://secunia.com/advisories/21532 ↗
- http://secunia.com/advisories/21270 ↗
- http://www.vupen.com/english/advisories/2008/0083 ↗
- https://usn.ubuntu.com/327-1/ ↗
- http://secunia.com/advisories/21361 ↗
- http://secunia.com/advisories/21631 ↗
- http://www.securityfocus.com/archive/1/446658/100/200/threaded ↗
- http://www.securityfocus.com/archive/1/446657/100/200/threaded ↗
- http://secunia.com/advisories/21246 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27980 ↗
- http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html ↗
- http://secunia.com/advisories/21229 ↗
- http://securitytracker.com/id?1016587 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0611.html ↗
- http://secunia.com/advisories/21228 ↗
- http://secunia.com/advisories/21250 ↗
- http://www.kb.cert.org/vuls/id/476724 ↗
- http://secunia.com/advisories/21358 ↗
- https://issues.rpath.com/browse/RPL-536 ↗
- https://issues.rpath.com/browse/RPL-537 ↗
- http://secunia.com/advisories/22066 ↗
- http://secunia.com/advisories/21269 ↗
- http://secunia.com/advisories/21343 ↗
- http://www.mozilla.org/security/announce/2006/mfsa2006-44.html ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 ↗
- http://secunia.com/advisories/22065 ↗
- http://www.ubuntu.com/usn/usn-354-1 ↗