CVE-2006-2332: Low severity Mozilla Firefox vulnerability

Published May 12, 2006

Updated

Mozilla Firefox 1.5.0.3 allows remote attackers to cause a denial of service via a web page with a large number of IMG elements in which the SRC attribute is a mailto URI. NOTE: another researcher found that the web page caused a temporary browser slowdown instead of a crash.

Affected Software

1 affected component

Mozilla Firefox=1.5.0.3

Event History

May 12, 2006

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-2332?

CVE-2006-2332 is classified as a denial of service vulnerability affecting Mozilla Firefox 1.5.0.3.

How do I fix CVE-2006-2332?

To fix CVE-2006-2332, you should upgrade to a later version of Mozilla Firefox that does not contain this vulnerability.

What attack vector does CVE-2006-2332 use?

CVE-2006-2332 allows remote attackers to exploit the vulnerability via a web page containing a large number of IMG elements with mailto URIs.

Is CVE-2006-2332 likely to crash my browser?

CVE-2006-2332 may cause a temporary slowdown of the browser, and in some cases, it could lead to a crash.

Who is affected by CVE-2006-2332?

Users of Mozilla Firefox version 1.5.0.3 are affected by CVE-2006-2332.