CVE-2006-2788

security flaw

Published Jun 2, 2006 CVSS 2.0 · 7.5 High EPSS 4.4% KEV · Not listed
Description
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1191-1 New Mozilla Thunderbird packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1192-1 New Mozilla packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1210-1 New Mozilla Firefox packages fix several vulnerabilities
EUVD EUVD EUVD-2006-2785 Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.
Ubuntu USN Ubuntu USN USN-296-1 firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-361-1 Mozilla vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 6:06 PM
Reserved
Jun 2, 2006, 12:00 AM
Status
Modified
Published
Jun 2, 2006, 9:06 PM
Modified
Jun 16, 2026, 10:25 PM
Severity
Moderate
Public date
Jun 1, 2006, 12:00 AM