CVE-2006-5783: High severity Mozilla Firefox vulnerability

Published Nov 7, 2006

Updated

DISPUTED Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service (crash) via a long URL in an A tag. NOTE: this issue has been disputed by several vendors, who could not reproduce the report. In addition, the scope of the impact - system freeze - suggests an issue that is not related to Firefox. Due to this impact, CVE concurs with the dispute.

Affected Software

1 affected component

Mozilla Firefox=1.5.0.7

Event History

Nov 7, 2006

CVE Published

11:07 PM

Disputed

11:07 PM

Data Sourced

via NVD·11:07 PM

DescriptionSeverityAffected Software

Nov 8, 2006

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5783?

CVE-2006-5783 is considered a denial of service vulnerability that could cause Firefox to crash.

How do I fix CVE-2006-5783?

To address CVE-2006-5783, it is recommended to update to a later version of Firefox that does not have this vulnerability.

What software is affected by CVE-2006-5783?

CVE-2006-5783 specifically affects Mozilla Firefox version 1.5.0.7 on Kubuntu Linux.

Can CVE-2006-5783 be exploited remotely?

Yes, CVE-2006-5783 can be exploited remotely through malicious A tags with long URLs.

Is CVE-2006-5783 a confirmed vulnerability?

CVE-2006-5783 has been disputed by several vendors, as they could not reproduce the reported denial of service behavior.