CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
4.8 | $0-$5k | 0.00 |
A vulnerability, which was classified as problematic, was found in Mozilla Firefox and Thunderbird up to 1.5.0.6 (Web Browser). Affected is some unknown processing. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. CVE summarizes:
Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a buffer over-read.
The bug was discovered 09/14/2006. The weakness was shared 09/15/2006 by Martijn Wargers (shutdown) with Martijn Wargers as confirmed advisory (CERT.org). The advisory is shared for download at kb.cert.org. This vulnerability is traded as CVE-2006-4566 since 09/06/2006. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available.
It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $5k-$25k. The vulnerability scanner Nessus provides a plugin with the ID 22424 (CentOS 4 : firefox (CESA-2006:0675)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CentOS Local Security Checks and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 156230 (Oracle Enterprise Linux Update for Firefox (ELSA-2006:0733,ELSA-2006:0675,ELSA-2006:0610)).
Upgrading to version 1.5.0.7 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability. Furthermore it is possible to detect and prevent this kind of attack with TippingPoint and the filter 9090.
The vulnerability is also documented in the databases at X-Force (28958), Tenable (22424), SecurityFocus (BID 20042†), OSVDB (28844†) and Secunia (SA21906†). The entries VDB-2544, VDB-2547, VDB-2543 and VDB-2548 are related to this item.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.8
VulDB Base Score: 5.3
VulDB Temp Score: 4.8
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Denial of serviceCWE: CWE-404
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Proof-of-Concept
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 22424
Nessus Name: CentOS 4 : firefox (CESA-2006:0675)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
OpenVAS ID: 57485
OpenVAS Name: Debian Security Advisory DSA 1191-1 (mozilla-thunderbird)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Upgrade: Firefox/Thunderbird 1.5.0.7
TippingPoint: 🔍
McAfee IPS: 🔍
McAfee IPS Version: 🔍
SourceFire IPS: 🔍
PaloAlto IPS: 🔍
Fortigate IPS: 🔍
Timeline
09/06/2006 🔍09/14/2006 🔍
09/14/2006 🔍
09/15/2006 🔍
09/15/2006 🔍
09/15/2006 🔍
09/15/2006 🔍
09/15/2006 🔍
09/15/2006 🔍
09/18/2006 🔍
09/22/2006 🔍
03/12/2015 🔍
01/14/2025 🔍
Sources
Vendor: mozilla.orgProduct: mozilla.org
Advisory: kb.cert.org
Researcher: Martijn Wargers (shutdown)
Organization: Martijn Wargers
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2006-4566 (🔍)
OVAL: 🔍
CERT: 🔍
X-Force: 28958
SecurityFocus: 20042 - Mozilla Firefox/Thunderbird/Seamonkey Multiple Remote Vulnerabilities
Secunia: 21906 - Mozilla Firefox Multiple Vulnerabilities, Highly Critical
OSVDB: 28844 - CVE-2006-4566 - Mozilla - Multiple Products - Denial-Of-Service Issue
SecurityTracker: 1016846
Vulnerability Center: 12717 - Mozilla Web-Browsers Buffer Over-Read via Regular Expression with Unterminated Backslash, Medium
Vupen: ADV-2006-3617
See also: 🔍
Entry
Created: 03/12/2015 03:51 PMUpdated: 01/14/2025 05:52 AM
Changes: 03/12/2015 03:51 PM (86), 07/08/2019 04:12 PM (13), 01/14/2025 05:52 AM (17)
Complete: 🔍
Cache ID: 18:47D:40
No comments yet. Languages: en.
Please log in to comment.