CVE-2006-2788

Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.

🔗 References (46)

• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2006-0609.html
• secalert@redhathttp://secunia.com/advisories/21269
• secalert@redhathttp://secunia.com/advisories/21270
• secalert@redhathttp://secunia.com/advisories/21336
• secalert@redhathttp://secunia.com/advisories/21532
• secalert@redhathttp://secunia.com/advisories/21631
• secalert@redhathttp://secunia.com/advisories/22247
• secalert@redhathttp://secunia.com/advisories/22299
• secalert@redhathttp://secunia.com/advisories/22342
• secalert@redhathttp://secunia.com/advisories/22849
• secalert@redhathttp://www.debian.org/security/2006/dsa-1192
• secalert@redhathttp://www.debian.org/security/2006/dsa-1210
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDKSA-2006:143
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDKSA-2006:145
• secalert@redhathttp://www.redhat.com/support/errata/RHSA-2006-0578.html