CVE-2006-6504

Published: Dec 20, 2006Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.

Affected (6)

Products: Mozilla: Firefox, Seamonkey · Canonical: Ubuntu Linux

2 products

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	From 1.5 to 1.5.0.9
Mozilla Firefox	From 2.0 to 2.0.0.1
Mozilla Seamonkey	Before 1.0.7

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 5.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (84)

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2297

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2338

Source: secalert@redhat.com

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

Broken Link

http://rhn.redhat.com/errata/RHSA-2006-0758.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2006-0759.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2006-0760.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23282

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23422

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23433

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23439

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23440

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23468

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23514

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23545

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23589

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23601

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23614

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23618

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23672

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23692

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200701-02.xml

Source: secalert@redhat.com

Third Party Advisory

http://securitytracker.com/id?1017417

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://securitytracker.com/id?1017418

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.kb.cert.org/vuls/id/928956

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:010

Source: secalert@redhat.com

Third Party Advisory

http://www.mozilla.org/security/announce/2006/mfsa2006-73.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_80_mozilla.html

Source: secalert@redhat.com

Broken Link

http://www.novell.com/linux/security/advisories/2007_06_mozilla.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/archive/1/454939/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/455145/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/455728/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/21668

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-398-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/usn-398-2

Source: secalert@redhat.com

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA06-354A.html

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2006/5068

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

Third Party Advisory

http://www.zerodayinitiative.com/advisories/ZDI-06-051.html

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-883

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11077

Source: secalert@redhat.com

Third Party Advisory

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc (unsafe URL)