CVE-2006-0294

Published: Feb 2, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory.

Affected (22)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 beta
Mozilla Thunderbird	Version 1.5

References (24)

http://secunia.com/advisories/18700

Source: secalert@redhat.com

http://secunia.com/advisories/18704

Source: secalert@redhat.com

http://secunia.com/advisories/22065

Source: secalert@redhat.com

http://securitytracker.com/id?1015570

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2006/mfsa2006-02.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16476

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/0413

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3749

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=317934

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/24431

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1514

Source: secalert@redhat.com

http://secunia.com/advisories/18700

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18704

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22065

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015570

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2006/mfsa2006-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16476

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0413

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3749

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=317934

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/24431

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1514

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.