CVE-2006-0749

nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.

Score

CVSS 2.0 9.3 Critical

Status

Analyzed - secalert@redhat.com

Published

2006-04-14

Last modified

2024-08-07

Weaknesses

CWE-399

Affected products

• Firefox (Mozilla)
• Mozilla Suite (Mozilla)
• Seamonkey (Mozilla)
• Thunderbird (Mozilla)

References

• http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
• http://secunia.com/advisories/19631
• http://secunia.com/advisories/19696
• http://secunia.com/advisories/19714
• http://secunia.com/advisories/19721
• http://secunia.com/advisories/19729
• http://secunia.com/advisories/19746
• http://secunia.com/advisories/19759
• http://secunia.com/advisories/19780
• http://secunia.com/advisories/19794
• http://secunia.com/advisories/19811
• http://secunia.com/advisories/19821
• http://secunia.com/advisories/19823
• http://secunia.com/advisories/19852
• http://secunia.com/advisories/19862
• http://secunia.com/advisories/19863
• http://secunia.com/advisories/19902
• http://secunia.com/advisories/19941
• http://secunia.com/advisories/19950
• http://secunia.com/advisories/20051
• http://secunia.com/advisories/21033
• http://secunia.com/advisories/21622
• http://securityreason.com/securityalert/729
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
• http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
• http://www.debian.org/security/2006/dsa-1044
• http://www.debian.org/security/2006/dsa-1046