CVE-2006-3731: Low severity Mozilla Firefox vulnerability

Published Jul 19, 2006

Updated

Mozilla Firefox 1.5.0.4 and earlier allows remote user-assisted attackers to cause a denial of service (crash) via a form with a multipart/form-data encoding and a user-uploaded file. NOTE: a third party has claimed that this issue might be related to the LiveHTTPHeaders extension.

Affected Software

7 affected components

Mozilla Firefox=1.5

Mozilla Firefox=1.5-beta1

Mozilla Firefox=1.5-beta2

Mozilla Firefox=1.5.0.1

Mozilla Firefox=1.5.0.2

Mozilla Firefox=1.5.0.3

Mozilla Firefox=1.5.0.4

Event History

Jul 19, 2006

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3731?

CVE-2006-3731 is classified as a denial of service vulnerability that may cause the affected system to crash.

How do I fix CVE-2006-3731?

To mitigate CVE-2006-3731, update Mozilla Firefox to version 1.5.0.5 or later.

Which versions of Firefox are affected by CVE-2006-3731?

CVE-2006-3731 affects Mozilla Firefox versions 1.5.0.4 and earlier, including beta versions.

What kind of attacks can exploit CVE-2006-3731?

CVE-2006-3731 can be exploited by remote user-assisted attackers through specially crafted multipart/form-data forms.

Is there any connection between CVE-2006-3731 and LiveHTTPHeaders extension?

Yes, a third party has claimed that CVE-2006-3731 may be related to the LiveHTTPHeaders extension.