CVE-2006-0295

Published: Feb 2, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.

Affected (4)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 beta
Mozilla Thunderbird	Version 1.5

References (28)

http://secunia.com/advisories/18700

Source: secalert@redhat.com

http://secunia.com/advisories/18704

Source: secalert@redhat.com

http://secunia.com/advisories/22065

Source: secalert@redhat.com

http://securitytracker.com/id?1015570

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/759273

Source: secalert@redhat.com

US Government Resource

http://www.mozilla.org/security/announce/2006/mfsa2006-04.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16476

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA06-038A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2006/0413

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3749

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=319296

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/24433

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562

Source: secalert@redhat.com

http://secunia.com/advisories/18700

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18704

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22065

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015570

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/759273

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.mozilla.org/security/announce/2006/mfsa2006-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16476

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-038A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/0413

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3749

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=319296

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/24433

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.