Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
Firefox
(1.0, 1.0.8, 1.1, 1.5.0.2)
SeaMonkey
(0.0.0, 1.0.1)
Thunderbird
(1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.5 Beta, 1.0.6, 1.0.7, 1.0.8, 1.1, 1.5, 1.5 Beta 2, 1.5.0.1, 1.5.0.2)
Описание
Уязвимость в Firefox, Thunderbird и SeaMonkey позволяет злоумышленникам, действующим удаленно, вызвать отказ в обслуживании и, возможно, выполнить произвольный код по неопределенным векторам атаки, связанным с DHTML.
Как исправить
Для устранения уязвимости необходимо установить последнюю версию продукта, соответствующую используемой платформе. Необходимую информацию можно получить по адресу:
http://www.mozilla.org/products/
http://www.mozilla.org/products/
Ссылки
http://www.mozilla.org/security/announce/2006/mfsa2006-20.html
https://bugzilla.mozilla.org/show_bug.cgi?id=282105
REDHAT (RHSA-2006:0328): http://www.redhat.com/support/errata/RHSA-2006-0328.html
CERT-VN (VU#350262): http://www.kb.cert.org/vuls/id/350262
BID (17516): http://www.securityfocus.com/bid/17516
FRSIRT (ADV-2006-1356): http://www.frsirt.com/english/advisories/2006/1356
SECTRACK (1015919): http://securitytracker.com/id?1015919
SECTRACK (1015921): http://securitytracker.com/id?1015921
SECTRACK (1015920): http://securitytracker.com/id?1015920
CERT (TA06-107A): http://www.us-cert.gov/cas/techalerts/TA06-107A.html
DEBIAN (DSA-1046): http://www.debian.org/security/2006/dsa-1046
DEBIAN (DSA-1051): http://www.debian.org/security/2006/dsa-1051
FEDORA (FEDORA-2006-410): http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html
FEDORA (FEDORA-2006-411): http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html
HP (HPSBTU02118): http://www.securityfocus.com/archive/1/archive/1/434524/100/0/threaded
REDHAT (RHSA-2006:0330): http://www.redhat.com/support/errata/RHSA-2006-0330.html
FEDORA (FLSA:189137-2): http://www.securityfocus.com/archive/1/archive/1/436338/100/0/threaded
SCO (SCOSA-2006.26): ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt
SUNALERT (102550): http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
HP (HPSBUX02153): http://www.securityfocus.com/archive/1/archive/1/446658/100/200/threaded
HP (HPSBUX02156): http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
OVAL (oval:org.mitre.oval:def:1901): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1901
https://bugzilla.mozilla.org/show_bug.cgi?id=282105
REDHAT (RHSA-2006:0328): http://www.redhat.com/support/errata/RHSA-2006-0328.html
CERT-VN (VU#350262): http://www.kb.cert.org/vuls/id/350262
BID (17516): http://www.securityfocus.com/bid/17516
FRSIRT (ADV-2006-1356): http://www.frsirt.com/english/advisories/2006/1356
SECTRACK (1015919): http://securitytracker.com/id?1015919
SECTRACK (1015921): http://securitytracker.com/id?1015921
SECTRACK (1015920): http://securitytracker.com/id?1015920
CERT (TA06-107A): http://www.us-cert.gov/cas/techalerts/TA06-107A.html
DEBIAN (DSA-1046): http://www.debian.org/security/2006/dsa-1046
DEBIAN (DSA-1051): http://www.debian.org/security/2006/dsa-1051
FEDORA (FEDORA-2006-410): http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html
FEDORA (FEDORA-2006-411): http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html
HP (HPSBTU02118): http://www.securityfocus.com/archive/1/archive/1/434524/100/0/threaded
REDHAT (RHSA-2006:0330): http://www.redhat.com/support/errata/RHSA-2006-0330.html
FEDORA (FLSA:189137-2): http://www.securityfocus.com/archive/1/archive/1/436338/100/0/threaded
SCO (SCOSA-2006.26): ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt
SUNALERT (102550): http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
HP (HPSBUX02153): http://www.securityfocus.com/archive/1/archive/1/446658/100/200/threaded
HP (HPSBUX02156): http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
OVAL (oval:org.mitre.oval:def:1901): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1901
