First published: Sun Mar 19 2006(Updated: )
** DISPUTED ** Mozilla Firefox 1.0.7 and 1.5.0.1 allows remote attackers to cause a denial of service (crash) via an HTML tag with a large number of script action handlers such as onload and onmouseover, which triggers the crash when the user views the page source. NOTE: Red Hat has disputed this issue, suggesting that "It is likely the reporter was running the IE Tab extension," and Mozilla also confirmed that this is not an issue in Firefox itself.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | =1.0.7 | |
Mozilla Firefox | =1.5.0.1 | |
=1.0.7 | ||
=1.5.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-1273 is classified as a denial of service vulnerability.
To mitigate CVE-2006-1273, upgrade Mozilla Firefox to a version later than 1.5.0.1.
Versions 1.0.7 and 1.5.0.1 of Mozilla Firefox are affected by CVE-2006-1273.
Yes, CVE-2006-1273 can be exploited remotely by attackers using a specially crafted HTML tag.
CVE-2006-1273 causes Mozilla Firefox to crash when the user views the page source containing the exploit.