CVE-2006-0297

Published: Feb 2, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the (1) EscapeAttributeValue in jsxml.c for E4X, (2) nsSVGCairoSurface::Init in SVG, and (3) nsCanvasRenderingContext2D.cpp in Canvas.

Affected (5)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 beta
Mozilla Thunderbird	Version 1.5

References (26)

http://secunia.com/advisories/18700

Source: secalert@redhat.com

http://secunia.com/advisories/18704

Source: secalert@redhat.com

http://secunia.com/advisories/22065

Source: secalert@redhat.com

http://securitytracker.com/id?1015570

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2006/mfsa2006-06.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16476

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/0413

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3749

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=319872

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=322215

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/24435

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1339

Source: secalert@redhat.com

http://secunia.com/advisories/18700

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18704

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22065

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015570

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2006/mfsa2006-06.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16476

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0413

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3749

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=319872

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=322215

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24435

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1339

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.