VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 21, 2006· Updated Jun 16, 2026

CVE-2006-3731

CVE-2006-3731

Description

Mozilla Firefox 1.5.0.4 and earlier allows remote user-assisted attackers to cause a denial of service (crash) via a form with a multipart/form-data encoding and a user-uploaded file. NOTE: a third party has claimed that this issue might be related to the LiveHTTPHeaders extension.

Affected products

8
  • Mozilla Corporation/Firefox8 versions
    cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*
    • (no CPE)range: <=1.5.0.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.