CVE-2006-0749 nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of servi...
HighCVSS 9.3
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | >= 1.0, < 1.5 | 1.5 |
| mozilla suite | < 1.7.13 | 1.7.13 |
| mozilla seamonkey | < 1.0 | 1.0 |
| mozilla Thunderbird | >= 1.0, < 1.0.8 | 1.0.8 |
| debian/thunderbird(Debian:12) | < 1.5.0.2-1 | 1.5.0.2-1 |
| debian/thunderbird(Debian:13) | < 1.5.0.2-1 | 1.5.0.2-1 |
| debian/thunderbird(Debian:14) | < 1.5.0.2-1 | 1.5.0.2-1 |
References
- SUSE-SA:2006:021 broken-link vendor-advisory
- 19631 third-party-advisory
- 19696 third-party-advisory
- 19714 third-party-advisory
- 19721 third-party-advisory
- 19729 third-party-advisory
- 19746 third-party-advisory
- 19759 third-party-advisory
- 19780 third-party-advisory
- 19794 third-party-advisory
- 19811 third-party-advisory
- 19821 third-party-advisory
- 19823 third-party-advisory
- 19852 third-party-advisory
- 19862 third-party-advisory
- 19863 third-party-advisory
- 19902 third-party-advisory
- 19941 third-party-advisory
- 19950 third-party-advisory
- 20051 third-party-advisory
- 21033 third-party-advisory
- 21622 third-party-advisory
- 729 third-party-advisory
- 102550 broken-link vendor-advisory
- 228526 broken-link vendor-advisory
- support.avaya.com third-party-advisory
- DSA-1044 third-party-advisory vendor-advisory
- DSA-1046 third-party-advisory vendor-advisory
- DSA-1051 third-party-advisory vendor-advisory
- GLSA-200604-12 third-party-advisory vendor-advisory
- GLSA-200604-18 third-party-advisory vendor-advisory
- GLSA-200605-09 third-party-advisory vendor-advisory
- VU#736934 third-party-advisory us-government-resource
- MDKSA-2006:075 third-party-advisory vendor-advisory
- MDKSA-2006:076 third-party-advisory vendor-advisory
- MDKSA-2006:078 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- SUSE-SA:2006:022 broken-link vendor-advisory
- FEDORA-2006-410 third-party-advisory vendor-advisory
- FEDORA-2006-411 third-party-advisory vendor-advisory
- RHSA-2006:0328 third-party-advisory vendor-advisory
- RHSA-2006:0329 third-party-advisory vendor-advisory
- RHSA-2006:0330 third-party-advisory vendor-advisory
- 20060417 ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability broken-link mailing-list
- SSRT061145 broken-link vendor-advisory
- FLSA:189137-1 broken-link vendor-advisory
- FLSA:189137-2 broken-link vendor-advisory
- HPSBUX02122 broken-link vendor-advisory
- 17516 third-party-advisory vdb-entry
- TA06-107A third-party-advisory us-government-resource
- ADV-2006-1356 permissions-required third-party-advisory vdb-entry
- ADV-2006-3391 permissions-required third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- mozilla-nshtmlcontentsink-memory-corruption(25819) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:11704 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:1848 signature third-party-advisory vdb-entry
- USN-271-1 broken-link vendor-advisory
- USN-275-1 broken-link vendor-advisory
- USN-276-1 broken-link vendor-advisory
- Debian Security Tracker CVE-2006-0749 vendor-advisory