CVE - CVE-2006-0298

CVE-ID
CVE-2006-0298	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly read sensitive data via unknown attack vectors that trigger an out-of-bounds read.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://www.mozilla.org/security/announce/2006/mfsa2006-07.html HP:HPSBUX02156 URL:http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded HP:SSRT061236 URL:http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded BID:16476 URL:http://www.securityfocus.com/bid/16476 VUPEN:ADV-2006-0413 URL:http://www.vupen.com/english/advisories/2006/0413 VUPEN:ADV-2006-3749 URL:http://www.vupen.com/english/advisories/2006/3749 OVAL:oval:org.mitre.oval:def:677 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:677 SECTRACK:1015570 URL:http://securitytracker.com/id?1015570 SECUNIA:18700 URL:http://secunia.com/advisories/18700 SECUNIA:18704 URL:http://secunia.com/advisories/18704 SECUNIA:22065 URL:http://secunia.com/advisories/22065 XF:mozilla-xml-parser-dos(24436) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/24436
Assigning CNA
N/A
Date Entry Created
20060118	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060118)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2006-0298