CVE-2006-4565: Buffer Overflow
Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4565?
CVE-2006-4565 is rated as a critical vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2006-4565?
To fix CVE-2006-4565, users should upgrade to Mozilla Firefox version 1.5.0.7, Thunderbird version 1.5.0.7, or SeaMonkey version 1.0.5 or later.
What versions are affected by CVE-2006-4565?
CVE-2006-4565 affects Mozilla Firefox versions up to 1.5.0.6, Thunderbird versions up to 1.5.0.6, and SeaMonkey versions up to 1.0.4.
What type of attack does CVE-2006-4565 involve?
CVE-2006-4565 involves a heap-based buffer overflow attack triggered by a JavaScript regular expression using a minimal quantifier.
Can CVE-2006-4565 be exploited remotely?
Yes, CVE-2006-4565 can be exploited remotely, allowing attackers to cause crashes and possibly execute code on affected systems.