(Sun Issues Fix for Mozilla Browser) Mozilla Firefox Memory Corruption in Layout Engine and Javascript Engine May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1018209 |
|
SecurityTracker URL: http://securitytracker.com/id/1018209
|
|
CVE Reference:
CVE-2006-6498
(Links to External Site)
|
Updated: Aug 21 2007
|
Original Entry Date: Jun 8 2007
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 1.5 prior to 1.5.0.9, 2.0
|
Description:
A vulnerability was reported in Mozilla Firefox. A remote user may be able to cause arbitrary code to be executed on the target user's system. Mozilla Browser is affected.
A remote user can create specially crafted HTML that, when loaded by the target user, will trigger a memory corruption error and crash or potentially execute arbitrary code on the target user's system. The code will run with the privileges of the target user.
Andrew Miller, David Baron, Georgi Guninski, Jesse Ruderman, Olli Pettay, and Vladimir Vukicevic reported the vulnerabilities in the layout engine.
Igor Bukanov, Jesse Ruderman and moz_bug_r_a4 reported the vulnerabilities in the JavaScript engine.
Keith Victor reported a vulnerability in js_dtoa().
[Editor's note: The Mozilla Foundation has issued several additional advisories affecting Firefox, Thunderbird, and Seamonkey. Separate Alerts will be issued later today for each Mozilla advisory.]
|
Impact:
A remote user can create HTML that, when loaded by the target user, may execute arbitrary code on the target user's system.
|
Solution:
Sun has issued the following fixes for the Mozilla Browser on Sun Solaris.
SPARC Platform
* Mozilla 1.7 (for Solaris 8 and Solaris 9) with patch 120671-06 or later
* Mozilla 1.7 (for Solaris 10) with patch 119115-29 or later
x86 Platform
* Mozilla 1.7 (for Solaris 8 and Solaris 9) with patch 120672-06 or later
* Mozilla 1.7 (for Solaris 10) with patch 119116-29 or later
The Sun advisory is available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102955-1
[Editor's note: The vendor indicates that the Mozilla browser on Solaris is affected by only one of the vulnerabilities listed in CVE-2006-6498, which is Mozilla bug number 361346.]
|
Vendor URL: www.mozilla.org/security/announce/2006/mfsa2006-68.html (Links to External Site)
|
Cause:
Access control error, Boundary error
|
Underlying OS:
UNIX (Solaris - SunOS)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Thu, 7 Jun 2007 22:30:36 -0400
Subject: Security Vulnerability in JavaScript Engine in Mozilla 1.7 for Solaris 8, 9 and 10
|
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102955-1
CVE-2006-6498
|
|
