Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2006-12-20 01:28
Updated : 2024-02-04 17:13
NVD link : CVE-2006-6504
Mitre link : CVE-2006-6504
CVE.ORG link : CVE-2006-6504
JSON object : View
Products Affected
mozilla
- firefox
- seamonkey
canonical
- ubuntu_linux
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')