NetSight
IP …
medium4.3

CVE-2006-6499

The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory inst…

Impact

The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.

Affected products

VendorProductAffected versions
MozillaFirefox
from 1.5 before 1.5.0.9
from 2.0 before 2.0.0.1
MozillaSeamonkey
before 1.0.7
MozillaThunderbird
before 1.5.0.9
DebianDebian Linux
Versions 3.1, 4.0
CanonicalUbuntu Linux
Versions 5.10, 6.06, 6.10

Weakness classification

CWE-835

References