CVE - CVE-2006-6504

CVE-ID
CVE-2006-6504	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1017417 URL:http://securitytracker.com/id?1017417 MISC:1017418 URL:http://securitytracker.com/id?1017418 MISC:20061202-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc MISC:20061220 ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability URL:http://www.securityfocus.com/archive/1/454939/100/0/threaded MISC:20061222 rPSA-2006-0234-1 firefox URL:http://www.securityfocus.com/archive/1/455145/100/0/threaded MISC:20070102 rPSA-2006-0234-2 firefox thunderbird URL:http://www.securityfocus.com/archive/1/455728/100/200/threaded MISC:21668 URL:http://www.securityfocus.com/bid/21668 MISC:23282 URL:http://secunia.com/advisories/23282 MISC:23422 URL:http://secunia.com/advisories/23422 MISC:23433 URL:http://secunia.com/advisories/23433 MISC:23439 URL:http://secunia.com/advisories/23439 MISC:23440 URL:http://secunia.com/advisories/23440 MISC:23468 URL:http://secunia.com/advisories/23468 MISC:23514 URL:http://secunia.com/advisories/23514 MISC:23545 URL:http://secunia.com/advisories/23545 MISC:23589 URL:http://secunia.com/advisories/23589 MISC:23601 URL:http://secunia.com/advisories/23601 MISC:23614 URL:http://secunia.com/advisories/23614 MISC:23618 URL:http://secunia.com/advisories/23618 MISC:23672 URL:http://secunia.com/advisories/23672 MISC:23692 URL:http://secunia.com/advisories/23692 MISC:ADV-2006-5068 URL:~~http://www.vupen.com/english/advisories/2006/5068~~ (Obsolete source) MISC:ADV-2008-0083 URL:~~http://www.vupen.com/english/advisories/2008/0083~~ (Obsolete source) MISC:FEDORA-2006-1491 URL:http://fedoranews.org/cms/node/2297 MISC:FEDORA-2007-004 URL:http://fedoranews.org/cms/node/2338 MISC:GLSA-200701-02 URL:http://security.gentoo.org/glsa/glsa-200701-02.xml MISC:GLSA-200701-04 URL:http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml MISC:HPSBUX02153 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 MISC:MDKSA-2007:010 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2007:010~~ (Obsolete source) MISC:RHSA-2006:0758 URL:http://rhn.redhat.com/errata/RHSA-2006-0758.html MISC:RHSA-2006:0759 URL:http://rhn.redhat.com/errata/RHSA-2006-0759.html MISC:RHSA-2006:0760 URL:http://rhn.redhat.com/errata/RHSA-2006-0760.html MISC:SSRT061181 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 MISC:SUSE-SA:2006:080 URL:http://www.novell.com/linux/security/advisories/2006_80_mozilla.html MISC:SUSE-SA:2007:006 URL:http://www.novell.com/linux/security/advisories/2007_06_mozilla.html MISC:TA06-354A URL:http://www.us-cert.gov/cas/techalerts/TA06-354A.html MISC:USN-398-1 URL:http://www.ubuntu.com/usn/usn-398-1 MISC:USN-398-2 URL:http://www.ubuntu.com/usn/usn-398-2 MISC:VU#928956 URL:http://www.kb.cert.org/vuls/id/928956 MISC:http://www.mozilla.org/security/announce/2006/mfsa2006-73.html URL:http://www.mozilla.org/security/announce/2006/mfsa2006-73.html MISC:http://www.zerodayinitiative.com/advisories/ZDI-06-051.html URL:http://www.zerodayinitiative.com/advisories/ZDI-06-051.html MISC:https://issues.rpath.com/browse/RPL-883 URL:https://issues.rpath.com/browse/RPL-883 MISC:oval:org.mitre.oval:def:11077 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11077
Assigning CNA
Red Hat, Inc.
Date Record Created
20061213	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20061213)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)