Skip to content
OpenAdvisories
Unscored Public exploit CVE-2006-4253 EUVD-2006-4241GHSA-42hr-qcx2-4fr6

Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly …

Published Aug 21, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Package: thunderbird Ecosystem: Debian

Description

Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 thunderbird 1.5.0.7-1 —
Debian 13 thunderbird 1.5.0.7-1 —
Debian 12 thunderbird 1.5.0.7-1 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 4 devhelp +1 0.10-0.4.el4 RHSA-2006:0676
RHEL 4 firefox +1 1.5.0.7-0.1.el4 RHSA-2006:0677, RHSA-2006:0675
RHEL 4 seamonkey +5 1.0.5-0.1.el4 RHSA-2006:0676
RHEL 3 seamonkey +9 1.0.5-0.1.el3 RHSA-2006:0676

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 3

References