Vulnerability in K-Meleon Project
CVE-2006-4253
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.6 (High). Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.152 (96.6th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 96.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.149 · newest: 0.152 · change: +0.003
Affected products
- K-Meleon Project — versions 1.0.1
- Mozilla Firefox — versions 0.8, 0.9, 0.9.1
- Netscape Navigator — versions 8.1
Weakness classification (CWE)
References
- www.securityfocus.com/archive/1/448956/100/100/threaded (mailing-list)
- www.securityfocus.com/archive/1/443500/100/100/threaded (mailing-list)
- securitytracker.com/id (vdb-entry)
- secunia.com/advisories/22391 (Vendor Advisory, third-party-advisory)
- www.vupen.com/english/advisories/2006/3748 (vdb-entry)
- www.redhat.com/support/errata/RHSA-2006-0676.html (vendor-advisory)
- www.mozilla.org/security/announce/2006/mfsa2006-59.html
- lcamtuf.coredump.cx/ffoxdie.html
- secunia.com/advisories/22055 (Vendor Advisory, third-party-advisory)
- secunia.com/advisories/22195 (third-party-advisory)