CVE-2006-0294

Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*

History

21 Nov 2024, 00:06

Type Values Removed Values Added
References () http://secunia.com/advisories/18700 - () http://secunia.com/advisories/18700 -
References () http://secunia.com/advisories/18704 - () http://secunia.com/advisories/18704 -
References () http://secunia.com/advisories/22065 - () http://secunia.com/advisories/22065 -
References () http://securitytracker.com/id?1015570 - () http://securitytracker.com/id?1015570 -
References () http://www.mozilla.org/security/announce/2006/mfsa2006-02.html - () http://www.mozilla.org/security/announce/2006/mfsa2006-02.html -
References () http://www.securityfocus.com/archive/1/446657/100/200/threaded - () http://www.securityfocus.com/archive/1/446657/100/200/threaded -
References () http://www.securityfocus.com/bid/16476 - () http://www.securityfocus.com/bid/16476 -
References () http://www.vupen.com/english/advisories/2006/0413 - () http://www.vupen.com/english/advisories/2006/0413 -
References () http://www.vupen.com/english/advisories/2006/3749 - () http://www.vupen.com/english/advisories/2006/3749 -
References () https://bugzilla.mozilla.org/show_bug.cgi?id=317934 - Patch () https://bugzilla.mozilla.org/show_bug.cgi?id=317934 - Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/24431 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/24431 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1514 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1514 -

Information

Published : 2006-02-02 20:06

Updated : 2024-11-21 00:06


NVD link : CVE-2006-0294

Mitre link : CVE-2006-0294

CVE.ORG link : CVE-2006-0294


JSON object : View

Products Affected

mozilla

  • firefox
  • thunderbird
  • seamonkey