CVE-2006-0749

Mozilla Firefox 1.0-1.5, Mozilla Suite <1.7.13, SeaMonkey <1.0, Thunderbird 1.0-1.0.8 - RCE via HTML Tag Sequence

Title source: llm

Description

nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.

References (61)

Core 61

Core References

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2006/mfsa2006-18.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19902

Vendor Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/275-1/

Third Party Advisory vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2006-0330.html

Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp

http://www.securityfocus.com/archive/1/434524/100/0/threaded

Broken Link vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc

Vendor Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/276-1/

Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp

http://www.securityfocus.com/archive/1/438730/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19941

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19780

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2006-0328.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19821

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21622

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19862

Third Party Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:075

Third Party Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19823

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-1051

Third Party Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html

Vendor Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/271-1/

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19714

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2006-0329.html

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19811

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19794

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19746

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21033

Broken Link vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19696

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/431126/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19759

Broken Link vendor-advisory x_refsource_suse

http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html

Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora

http://www.securityfocus.com/archive/1/436338/100/0/threaded

Permissions Required, Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/1356

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/25819

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/736934

Third Party Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:078

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19729

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/729

Third Party Advisory vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20051

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19863

Third Party Advisory vendor-advisory x_refsource_sco

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA06-107A.html

Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora

http://www.securityfocus.com/archive/1/436296/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/17516

Broken Link vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1

Third Party Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19852

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19721

Broken Link vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2006_04_25.html

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml

Permissions Required, Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/3391

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19631

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19950

Third Party Advisory, VDB Entry x_refsource_misc

http://www.zerodayinitiative.com/advisories/ZDI-06-009.html

Third Party Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:076

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-1046

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-1044

Scores

EPSS 0.1049

EPSS Percentile 95.3%

Details

CWE

CWE-399

Status published

Products (4)

mozilla/firefox 1.0 - 1.5

mozilla/mozilla_suite < 1.7.13

mozilla/seamonkey < 1.0

mozilla/thunderbird 1.0 - 1.0.8

Published Apr 14, 2006

Tracked Since Feb 18, 2026