<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2006-1993" target="_blank">CVE</a>)</em> : Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller context object. NOTE: this was originally claimed to be a buffer overflow in (1) js320.dll and (2) xpcom_core.dll, but the vendor disputes this claim.

Upgrade to version 1.5.0.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Unknown or Incomplete

• Security Tracker: 1015981
• Milw0rm: 1716
• Exploit Database: 1716
• Secunia Advisory ID: 19802 20015 20019 20070 20214 22066
• CVE ID: 2006-1993 (see also: NVD)
• SCIP VulDB ID: 2187
• CERT VU: 866300
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0502.html
  http://archives.neohapsis.com/archives/bugtraq/2008-01/0085.html
  http://archives.neohapsis.com/archives/vuln-dev/2006-q2/0037.html
• Other Advisory URL: http://browserfun.blogspot.com/2006/07/mobb-4-mozilla-firefox-designmode.html
  http://www.debian.org/security/2006/dsa-1053
  http://www.gentoo.org/security/en/glsa/glsa-200605-06.xml
  http://www.securident.com/vuln/ff.txt
  http://www.securiteam.com/securitynews/5AP040AIKO.html
  http://www.us.debian.org/security/2006/dsa-1055
• Vendor Specific News/Changelog Entry: http://forums.mozillazine.org/viewtopic.php?t=408603
  https://bugzilla.mozilla.org/show_bug.cgi?id=334515
• Vendor Specific Advisory URL: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00672120
  http://www.mozilla.org/security/announce/2006/mfsa2006-30.html
• Keyword: MFSA 2006-30 MoBB #4

Unknown or Incomplete