CVE - CVE-2006-0749

CVE-ID
CVE-2006-0749	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:17516 URL:http://www.securityfocus.com/bid/17516 BUGTRAQ:20060417 ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability URL:http://www.securityfocus.com/archive/1/431126/100/0/threaded CERT:TA06-107A URL:http://www.us-cert.gov/cas/techalerts/TA06-107A.html CERT-VN:VU#736934 URL:http://www.kb.cert.org/vuls/id/736934 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm CONFIRM:http://www.mozilla.org/security/announce/2006/mfsa2006-18.html DEBIAN:DSA-1044 URL:http://www.debian.org/security/2006/dsa-1044 DEBIAN:DSA-1046 URL:http://www.debian.org/security/2006/dsa-1046 DEBIAN:DSA-1051 URL:http://www.debian.org/security/2006/dsa-1051 FEDORA:FEDORA-2006-410 URL:http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html FEDORA:FEDORA-2006-411 URL:http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html FEDORA:FLSA:189137-1 URL:http://www.securityfocus.com/archive/1/436296/100/0/threaded FEDORA:FLSA:189137-2 URL:http://www.securityfocus.com/archive/1/436338/100/0/threaded GENTOO:GLSA-200604-12 URL:http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml GENTOO:GLSA-200604-18 URL:http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml GENTOO:GLSA-200605-09 URL:http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml HP:HPSBTU02118 URL:http://www.securityfocus.com/archive/1/434524/100/0/threaded HP:HPSBUX02122 URL:http://www.securityfocus.com/archive/1/438730/100/0/threaded HP:SSRT061145 URL:http://www.securityfocus.com/archive/1/434524/100/0/threaded HP:SSRT061158 URL:http://www.securityfocus.com/archive/1/438730/100/0/threaded MANDRIVA:MDKSA-2006:075 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:075~~ (Obsolete source) MANDRIVA:MDKSA-2006:076 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:076~~ (Obsolete source) MANDRIVA:MDKSA-2006:078 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:078~~ (Obsolete source) MISC:http://www.zerodayinitiative.com/advisories/ZDI-06-009.html OVAL:oval:org.mitre.oval:def:11704 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704 OVAL:oval:org.mitre.oval:def:1848 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848 REDHAT:RHSA-2006:0328 URL:http://www.redhat.com/support/errata/RHSA-2006-0328.html REDHAT:RHSA-2006:0329 URL:http://www.redhat.com/support/errata/RHSA-2006-0329.html REDHAT:RHSA-2006:0330 URL:http://www.redhat.com/support/errata/RHSA-2006-0330.html SCO:SCOSA-2006.26 URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt SECUNIA:19631 URL:http://secunia.com/advisories/19631 SECUNIA:19696 URL:http://secunia.com/advisories/19696 SECUNIA:19714 URL:http://secunia.com/advisories/19714 SECUNIA:19721 URL:http://secunia.com/advisories/19721 SECUNIA:19729 URL:http://secunia.com/advisories/19729 SECUNIA:19746 URL:http://secunia.com/advisories/19746 SECUNIA:19759 URL:http://secunia.com/advisories/19759 SECUNIA:19780 URL:http://secunia.com/advisories/19780 SECUNIA:19794 URL:http://secunia.com/advisories/19794 SECUNIA:19811 URL:http://secunia.com/advisories/19811 SECUNIA:19821 URL:http://secunia.com/advisories/19821 SECUNIA:19823 URL:http://secunia.com/advisories/19823 SECUNIA:19852 URL:http://secunia.com/advisories/19852 SECUNIA:19862 URL:http://secunia.com/advisories/19862 SECUNIA:19863 URL:http://secunia.com/advisories/19863 SECUNIA:19902 URL:http://secunia.com/advisories/19902 SECUNIA:19941 URL:http://secunia.com/advisories/19941 SECUNIA:19950 URL:http://secunia.com/advisories/19950 SECUNIA:20051 URL:http://secunia.com/advisories/20051 SECUNIA:21033 URL:http://secunia.com/advisories/21033 SECUNIA:21622 URL:http://secunia.com/advisories/21622 SGI:20060404-01-U URL:ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc SREASON:729 URL:http://securityreason.com/securityalert/729 SUNALERT:102550 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1~~ (Obsolete source) SUNALERT:228526 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1~~ (Obsolete source) SUSE:SUSE-SA:2006:021 URL:http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html SUSE:SUSE-SA:2006:022 URL:http://www.novell.com/linux/security/advisories/2006_04_25.html UBUNTU:USN-271-1 URL:https://usn.ubuntu.com/271-1/ UBUNTU:USN-275-1 URL:https://usn.ubuntu.com/275-1/ UBUNTU:USN-276-1 URL:https://usn.ubuntu.com/276-1/ VUPEN:ADV-2006-1356 URL:~~http://www.vupen.com/english/advisories/2006/1356~~ (Obsolete source) VUPEN:ADV-2006-3391 URL:~~http://www.vupen.com/english/advisories/2006/3391~~ (Obsolete source) XF:mozilla-nshtmlcontentsink-memory-corruption(25819) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/25819
Assigning CNA
Red Hat, Inc.
Date Record Created
20060217	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060217)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)