CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2788

Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.083

EPSS Ranking 91.9%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2006-2788

Mozilla » Firefox » Version: 0.10

cpe:2.3:a:mozilla:firefox:0.10
Mozilla » Firefox » Version: 0.10.1

cpe:2.3:a:mozilla:firefox:0.10.1
Mozilla » Firefox » Version: 0.8

cpe:2.3:a:mozilla:firefox:0.8
Mozilla » Firefox » Version: 0.9

cpe:2.3:a:mozilla:firefox:0.9
Mozilla » Firefox » Version: 0.9.1

cpe:2.3:a:mozilla:firefox:0.9.1
Mozilla » Firefox » Version: 0.9.2

cpe:2.3:a:mozilla:firefox:0.9.2
Mozilla » Firefox » Version: 0.9.3

cpe:2.3:a:mozilla:firefox:0.9.3
Mozilla » Firefox » Version: 1.0

cpe:2.3:a:mozilla:firefox:1.0
Mozilla » Firefox » Version: 1.0.1

cpe:2.3:a:mozilla:firefox:1.0.1
Mozilla » Firefox » Version: 1.0.2

cpe:2.3:a:mozilla:firefox:1.0.2
Mozilla » Firefox » Version: 1.0.3

cpe:2.3:a:mozilla:firefox:1.0.3
Mozilla » Firefox » Version: 1.0.4

cpe:2.3:a:mozilla:firefox:1.0.4
Mozilla » Firefox » Version: 1.0.5

cpe:2.3:a:mozilla:firefox:1.0.5
Mozilla » Firefox » Version: 1.0.6

cpe:2.3:a:mozilla:firefox:1.0.6
Mozilla » Firefox » Version: 1.0.7

cpe:2.3:a:mozilla:firefox:1.0.7
Mozilla » Firefox » Version: 1.5

cpe:2.3:a:mozilla:firefox:1.5
Mozilla » Firefox » Version: 1.5.0.1

cpe:2.3:a:mozilla:firefox:1.5.0.1
Mozilla » Firefox » Version: 1.5.0.2

cpe:2.3:a:mozilla:firefox:1.5.0.2
Mozilla » Firefox » Version: 1.5.0.3

cpe:2.3:a:mozilla:firefox:1.5.0.3
Mozilla » Firefox » Version: preview_release

cpe:2.3:a:mozilla:firefox:preview_release

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2788

Products

Pricing

Contact Us