OSVDB ID: 27572

Title: Mozilla Multiple Products nsListControlFrame::FireMenuItemActiveEvent Arbitrary Code Execution

Info

Disclosure

Jul 25, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Impact: Loss of Integrity
Disclosure: Vendor Verified

Solution

Upgrade Firefox to 1.5.0.5, Thunderbird to 1.5.0.5, and SeaMonkey to 1.0.3, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1016586 1016587 1016588
Bugtraq ID: 19181
Secunia Advisory ID: 19873 21216 21228 21229 21243 21246 21250 21262 21269 21270 21275 21336 21343 21358 21361 21529 21532 21607 21631 21675 22055 22065 22066 22210 22342 25839
CVE ID: 2006-3811 (see also: NVD)
SCIP VulDB ID: 2406
Related OSVDB ID: 27558 27559 27560 27561 27562 27564 27565 27566 27567 27568 27569 27573 27574 27575 27576 27577
CERT VU: 527676
VUPEN Advisory: ADV-2006-2998
Vendor Specific Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc http://lists.suse.com/archive/suse-security-announce/2006-Aug/0007.html
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1
http://www.gentoo.org/security/en/glsa/glsa-200608-02.xml
http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml
http://www.gentoo.org/security/en/glsa/glsa-200608-04.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
http://www.mozilla.org/security/announce/2006/mfsa2006-55.html
http://www.ubuntu.com/usn/usn-327-1
http://www.ubuntu.com/usn/usn-329-1
http://www.ubuntu.com/usn/usn-354-1
http://www.ubuntu.com/usn/usn-361-1
https://issues.rpath.com/browse/RPL-536
https://issues.rpath.com/browse/RPL-537
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-01/0085.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0696.html
News Article: http://news.com.com/Firefox+update+plugs+critical+holes/2100-1002_3-6099254.html
Vendor Specific News/Changelog Entry: http://www.caminobrowser.org/releases/1.0.2.php
https://bugzilla.mozilla.org/show_bug.cgi?id=336162
Other Advisory URL: http://www.mandriva.com/security/advisories?name=MDKSA-2006:146
http://www.ubuntu.com/usn/usn-350-1
http://www.us.debian.org/security/2006/dsa-1161
RedHat RHSA: RHSA-2006:0594 RHSA-2006:0608 RHSA-2006:0609 RHSA-2006:0610 RHSA-2006:0611

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/27572