Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 00:22
Type | Values Removed | Values Added |
---|---|---|
References | () ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc - Broken Link | |
References | () http://fedoranews.org/cms/node/2297 - Broken Link | |
References | () http://fedoranews.org/cms/node/2338 - Broken Link | |
References | () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - Broken Link | |
References | () http://rhn.redhat.com/errata/RHSA-2006-0758.html - Third Party Advisory | |
References | () http://rhn.redhat.com/errata/RHSA-2006-0759.html - Third Party Advisory | |
References | () http://rhn.redhat.com/errata/RHSA-2006-0760.html - Third Party Advisory | |
References | () http://secunia.com/advisories/23282 - Third Party Advisory | |
References | () http://secunia.com/advisories/23422 - Third Party Advisory | |
References | () http://secunia.com/advisories/23433 - Third Party Advisory | |
References | () http://secunia.com/advisories/23439 - Third Party Advisory | |
References | () http://secunia.com/advisories/23440 - Third Party Advisory | |
References | () http://secunia.com/advisories/23468 - Third Party Advisory | |
References | () http://secunia.com/advisories/23514 - Third Party Advisory | |
References | () http://secunia.com/advisories/23545 - Third Party Advisory | |
References | () http://secunia.com/advisories/23589 - Third Party Advisory | |
References | () http://secunia.com/advisories/23601 - Third Party Advisory | |
References | () http://secunia.com/advisories/23614 - Third Party Advisory | |
References | () http://secunia.com/advisories/23618 - Third Party Advisory | |
References | () http://secunia.com/advisories/23672 - Third Party Advisory | |
References | () http://secunia.com/advisories/23692 - Third Party Advisory | |
References | () http://security.gentoo.org/glsa/glsa-200701-02.xml - Third Party Advisory | |
References | () http://securitytracker.com/id?1017417 - Third Party Advisory, VDB Entry | |
References | () http://securitytracker.com/id?1017418 - Third Party Advisory, VDB Entry | |
References | () http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml - Third Party Advisory | |
References | () http://www.kb.cert.org/vuls/id/928956 - Third Party Advisory, US Government Resource | |
References | () http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 - Third Party Advisory | |
References | () http://www.mozilla.org/security/announce/2006/mfsa2006-73.html - Vendor Advisory | |
References | () http://www.novell.com/linux/security/advisories/2006_80_mozilla.html - Broken Link | |
References | () http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - Broken Link | |
References | () http://www.securityfocus.com/archive/1/454939/100/0/threaded - | |
References | () http://www.securityfocus.com/archive/1/455145/100/0/threaded - | |
References | () http://www.securityfocus.com/archive/1/455728/100/200/threaded - | |
References | () http://www.securityfocus.com/bid/21668 - Third Party Advisory, VDB Entry | |
References | () http://www.ubuntu.com/usn/usn-398-1 - Third Party Advisory | |
References | () http://www.ubuntu.com/usn/usn-398-2 - Third Party Advisory | |
References | () http://www.us-cert.gov/cas/techalerts/TA06-354A.html - Third Party Advisory, US Government Resource | |
References | () http://www.vupen.com/english/advisories/2006/5068 - Third Party Advisory | |
References | () http://www.vupen.com/english/advisories/2008/0083 - Third Party Advisory | |
References | () http://www.zerodayinitiative.com/advisories/ZDI-06-051.html - Third Party Advisory, VDB Entry | |
References | () https://issues.rpath.com/browse/RPL-883 - Broken Link | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11077 - Third Party Advisory |
Information
Published : 2006-12-20 01:28
Updated : 2024-11-21 00:22
NVD link : CVE-2006-6504
Mitre link : CVE-2006-6504
CVE.ORG link : CVE-2006-6504
JSON object : View
Products Affected
mozilla
- firefox
- seamonkey
canonical
- ubuntu_linux
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')