CVE - CVE-2006-0292

CVE-ID
CVE-2006-0292	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1015570 URL:http://securitytracker.com/id?1015570 MISC:102550 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1~~ (Obsolete source) MISC:16476 URL:http://www.securityfocus.com/bid/16476 MISC:18700 URL:http://secunia.com/advisories/18700 MISC:18703 URL:http://secunia.com/advisories/18703 MISC:18704 URL:http://secunia.com/advisories/18704 MISC:18705 URL:http://secunia.com/advisories/18705 MISC:18706 URL:http://secunia.com/advisories/18706 MISC:18708 URL:http://secunia.com/advisories/18708 MISC:18709 URL:http://secunia.com/advisories/18709 MISC:19230 URL:http://secunia.com/advisories/19230 MISC:19746 URL:http://secunia.com/advisories/19746 MISC:19759 URL:http://secunia.com/advisories/19759 MISC:19780 URL:http://secunia.com/advisories/19780 MISC:19821 URL:http://secunia.com/advisories/19821 MISC:19823 URL:http://secunia.com/advisories/19823 MISC:19852 URL:http://secunia.com/advisories/19852 MISC:19862 URL:http://secunia.com/advisories/19862 MISC:19863 URL:http://secunia.com/advisories/19863 MISC:19902 URL:http://secunia.com/advisories/19902 MISC:19941 URL:http://secunia.com/advisories/19941 MISC:19950 URL:http://secunia.com/advisories/19950 MISC:20051 URL:http://secunia.com/advisories/20051 MISC:20060201-01-U URL:ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U MISC:21033 URL:http://secunia.com/advisories/21033 MISC:21622 URL:http://secunia.com/advisories/21622 MISC:22065 URL:http://secunia.com/advisories/22065 MISC:228526 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1~~ (Obsolete source) MISC:ADV-2006-0413 URL:~~http://www.vupen.com/english/advisories/2006/0413~~ (Obsolete source) MISC:ADV-2006-3391 URL:~~http://www.vupen.com/english/advisories/2006/3391~~ (Obsolete source) MISC:ADV-2006-3749 URL:~~http://www.vupen.com/english/advisories/2006/3749~~ (Obsolete source) MISC:DSA-1044 URL:http://www.debian.org/security/2006/dsa-1044 MISC:DSA-1046 URL:http://www.debian.org/security/2006/dsa-1046 MISC:DSA-1051 URL:http://www.debian.org/security/2006/dsa-1051 MISC:FEDORA-2006-075 URL:http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html MISC:FEDORA-2006-076 URL:http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html MISC:FLSA-2006:180036-2 URL:http://www.securityfocus.com/archive/1/425978/100/0/threaded MISC:FLSA:180036-1 URL:http://www.securityfocus.com/archive/1/425975/100/0/threaded MISC:GLSA-200604-12 URL:http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml MISC:GLSA-200604-18 URL:http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml MISC:GLSA-200605-09 URL:http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml MISC:HPSBUX02122 URL:http://www.securityfocus.com/archive/1/438730/100/0/threaded MISC:HPSBUX02156 URL:http://www.securityfocus.com/archive/1/446657/100/200/threaded MISC:MDKSA-2006:036 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:036~~ (Obsolete source) MISC:MDKSA-2006:037 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:037~~ (Obsolete source) MISC:MDKSA-2006:078 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:078~~ (Obsolete source) MISC:RHSA-2006:0199 URL:http://www.redhat.com/support/errata/RHSA-2006-0199.html MISC:RHSA-2006:0200 URL:http://www.redhat.com/support/errata/RHSA-2006-0200.html MISC:RHSA-2006:0330 URL:http://www.redhat.com/support/errata/RHSA-2006-0330.html MISC:SCOSA-2006.26 URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt MISC:SSRT061158 URL:http://www.securityfocus.com/archive/1/438730/100/0/threaded MISC:SSRT061236 URL:http://www.securityfocus.com/archive/1/446657/100/200/threaded MISC:SUSE-SA:2006:022 URL:http://www.novell.com/linux/security/advisories/2006_04_25.html MISC:USN-271-1 URL:https://usn.ubuntu.com/271-1/ MISC:USN-275-1 URL:https://usn.ubuntu.com/275-1/ MISC:USN-276-1 URL:https://usn.ubuntu.com/276-1/ MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm MISC:http://www.mozilla.org/security/announce/2006/mfsa2006-01.html URL:http://www.mozilla.org/security/announce/2006/mfsa2006-01.html MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=316885 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=316885 MISC:mozilla-javascript-memory-corruption(24430) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/24430 MISC:oval:org.mitre.oval:def:10016 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10016 MISC:oval:org.mitre.oval:def:670 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A670
Assigning CNA
Red Hat, Inc.
Date Record Created
20060118	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060118)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)