PT-2006-7108 · Mozilla+1 · Firefox+2

Published

2006-12-19

·

Updated

2018-10-17

·

CVE-2006-6504

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.5.x through 1.5.0.8 Mozilla Firefox versions 2.x through 2.0.0.0 SeaMonkey versions prior to 1.0.7
Description The issue allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
Recommendations For Mozilla Firefox versions 1.5.x through 1.5.0.8, update to version 1.5.0.9 or later. For Mozilla Firefox versions 2.x through 2.0.0.0, update to version 2.0.0.1 or later. For SeaMonkey versions prior to 1.0.7, update to version 1.0.7 or later.

Fix

RCE

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-6504
HPSBUX02153
RHSA-2006:0758
RHSA-2006:0759
RHSA-2006:0760
RHSA-2006_0758
RHSA-2006_0759
RHSA-2006_0760

Affected Products

Firefox
Red Hat
Seamonkey