← back
CVE-2006-3677

CVE-2006-3677

EPSS 78.4%
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/2082unverifiedexploitdbwww.exploit-db.com/exploits/16300unverifiedexploitdbwww.exploit-db.com/exploits/9946unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.aschttp://rhn.redhat.com/errata/RHSA-2006-0609.htmlhttp://secunia.com/advisories/19873http://secunia.com/advisories/21216http://secunia.com/advisories/21229http://secunia.com/advisories/21243http://secunia.com/advisories/21246http://secunia.com/advisories/21262http://secunia.com/advisories/21269http://secunia.com/advisories/21270http://secunia.com/advisories/21336http://secunia.com/advisories/21343