CVE-2006-4566: Medium severity Mozilla SeaMonkey vulnerability
Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a buffer over-read.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4566?
CVE-2006-4566 is considered a denial of service vulnerability that leads to application crashes.
What software is affected by CVE-2006-4566?
CVE-2006-4566 affects Mozilla Firefox versions before 1.5.0.7, Thunderbird versions before 1.5.0.7, and SeaMonkey versions before 1.0.5.
How do I fix CVE-2006-4566?
To fix CVE-2006-4566, you should upgrade Mozilla Firefox to version 1.5.0.7, Thunderbird to version 1.5.0.7, or SeaMonkey to version 1.0.5 or later.
What types of attacks can exploit CVE-2006-4566?
CVE-2006-4566 can be exploited by remote attackers using crafted JavaScript regular expressions that cause a denial of service.
When was CVE-2006-4566 reported?
CVE-2006-4566 was reported in September 2006, highlighting security issues in earlier versions of Mozilla applications.