Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Firefox 1.5 can crash or be hijacked by crafted scripts

CVE-2006-0293 · published 20 years ago
Summary

Firefox 1.5's internal function handling may be tricked by specially written JavaScript to corrupt memory. This can make the browser stop working or allow an attacker to run their own code. Updating to a newer version of Firefox or applying the provided security patch resolves the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
mozilla firefox 1.5
cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*
Original advisory text
The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via user-defined method...
The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via user-defined methods that trigger garbage collection in a way that operates on freed objects.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
4% chance of attack within 30 days
Timeline
Published2 Feb 2006
Updated23 Oct 2026
First seen29 Sep 2026
Sources
CVE-2006-0293 · NVD
Track software like this
Free during beta