CVE-2006-0295
CVE-2006-0295
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.
EPSS 71.3% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
thunderbird Debian:12
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
thunderbird Debian:13
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
thunderbird Debian:14
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
Original sources
- https://bugzilla.mozilla.org/show_bug.cgi?id=319296
- http://secunia.com/advisories/18704
- http://www.vupen.com/english/advisories/2006/3749
- http://www.securityfocus.com/bid/16476
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562
- http://www.vupen.com/english/advisories/2006/0413
- http://securitytracker.com/id?1015570
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24433
- http://secunia.com/advisories/18700
- http://www.securityfocus.com/archive/1/446657/100/200/threaded
- http://www.mozilla.org/security/announce/2006/mfsa2006-04.html
- http://www.kb.cert.org/vuls/id/759273
- http://www.us-cert.gov/cas/techalerts/TA06-038A.html
- http://secunia.com/advisories/22065
- https://nvd.nist.gov/vuln/detail/CVE-2006-0295