CVE-2006-0749
nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.5%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.
Description
nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 10.49% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- mozilla/firefox · mozilla/mozilla suite · mozilla/seamonkey · mozilla/thunderbird
- Source
- secalert@redhat.com
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txtThird Party Advisory
- ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.ascBroken Link
- http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.htmlBroken Link
- http://secunia.com/advisories/19631Third Party Advisory
- http://secunia.com/advisories/19696Third Party Advisory
- http://secunia.com/advisories/19714Third Party Advisory
- http://secunia.com/advisories/19721Third Party Advisory
- http://secunia.com/advisories/19729Third Party Advisory
- http://secunia.com/advisories/19746Third Party Advisory
- http://secunia.com/advisories/19759Third Party Advisory
- http://secunia.com/advisories/19780Third Party Advisory
- http://secunia.com/advisories/19794Third Party Advisory
- http://secunia.com/advisories/19811Third Party Advisory
- http://secunia.com/advisories/19821Third Party Advisory
- http://secunia.com/advisories/19823Third Party Advisory
- http://secunia.com/advisories/19852Third Party Advisory
- http://secunia.com/advisories/19862Third Party Advisory
- http://secunia.com/advisories/19863Third Party Advisory
- http://secunia.com/advisories/19902Third Party Advisory
- http://secunia.com/advisories/19941Third Party Advisory
- http://secunia.com/advisories/19950Third Party Advisory
- http://secunia.com/advisories/20051Third Party Advisory
- http://secunia.com/advisories/21033Third Party Advisory
- http://secunia.com/advisories/21622Third Party Advisory
- http://securityreason.com/securityalert/729Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1Broken Link
- http://support.avaya.com/elmodocs2/security/ASA-2006-205.htmThird Party Advisory
- http://www.debian.org/security/2006/dsa-1044Third Party Advisory
- http://www.debian.org/security/2006/dsa-1046Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.