CVE-2006-1790

Impact

A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
• http://secunia.com/advisories/19631
• http://secunia.com/advisories/19714
• http://secunia.com/advisories/19721
• http://secunia.com/advisories/19729
• http://secunia.com/advisories/19746
• http://secunia.com/advisories/19759
• http://secunia.com/advisories/19780
• http://secunia.com/advisories/19794
• http://secunia.com/advisories/19811
• http://secunia.com/advisories/19852
• http://secunia.com/advisories/19862
• http://secunia.com/advisories/19863
• http://secunia.com/advisories/19902
• http://secunia.com/advisories/19941
• http://secunia.com/advisories/19950
• http://secunia.com/advisories/20051
• http://secunia.com/advisories/21033
• http://secunia.com/advisories/21622
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
• http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
• http://www.debian.org/security/2006/dsa-1044
• http://www.debian.org/security/2006/dsa-1046
• http://www.debian.org/security/2006/dsa-1051