FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-1790

This CVE name corresponds to:

Entered	Topic
2006-04-16	mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-1790 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-1790
Phase	Assigned(20060414)

Description

A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption.

References

Source	Reference
CONFIRM	http://www.mozilla.org/security/announce/2006/mfsa2006-11.html
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
DEBIAN	DSA-1044
DEBIAN	DSA-1046
DEBIAN	DSA-1051
FEDORA	FEDORA-2006-410
FEDORA	FEDORA-2006-411
FEDORA	FLSA:189137-1
FEDORA	FLSA:189137-2
GENTOO	GLSA-200604-12
GENTOO	GLSA-200604-18
GENTOO	GLSA-200605-09
HP	HPSBUX02122
HP	SSRT061158
MANDRIVA	MDKSA-2006:075
MANDRIVA	MDKSA-2006:076
REDHAT	RHSA-2006:0328
REDHAT	RHSA-2006:0329
REDHAT	RHSA-2006:0330
SCO	SCOSA-2006.26
SGI	20060404-01-U
SUNALERT	102550
SUNALERT	228526
SUSE	SUSE-SA:2006:021
UBUNTU	USN-275-1
UBUNTU	USN-276-1
UBUNTU	USN-271-1
BID	17516
OVAL	oval:org.mitre.oval:def:11202
VUPEN	ADV-2006-1356
OVAL	oval:org.mitre.oval:def:1266
SECUNIA	19631
SECUNIA	19759
SECUNIA	19794
SECUNIA	19811
SECUNIA	19852
SECUNIA	19862
SECUNIA	19863
SECUNIA	19902
SECUNIA	19950
SECUNIA	19941
SECUNIA	19714
SECUNIA	19721
SECUNIA	19746
SECUNIA	21033
SECUNIA	21622
SECUNIA	19729
SECUNIA	19780
SECUNIA	20051
XF	mozilla-installtrigger-memory-corruption(25809)