CVE-2006-0297
CVE-2006-0297
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the (1) EscapeAttributeValue in jsxml.c for E4X, (2) nsSVGCairoSurface::Init in SVG, and (3) nsCanvasRenderingContext2D.cpp in Canvas.
EPSS 3.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
thunderbird Debian:12
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
thunderbird Debian:13
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
thunderbird Debian:14
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
Original sources
- https://bugzilla.mozilla.org/show_bug.cgi?id=319872
- http://secunia.com/advisories/18704
- http://www.vupen.com/english/advisories/2006/3749
- http://www.securityfocus.com/bid/16476
- http://www.vupen.com/english/advisories/2006/0413
- http://securitytracker.com/id?1015570
- http://www.mozilla.org/security/announce/2006/mfsa2006-06.html
- http://secunia.com/advisories/18700
- http://www.securityfocus.com/archive/1/446657/100/200/threaded
- https://bugzilla.mozilla.org/show_bug.cgi?id=322215
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1339
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24435
- http://secunia.com/advisories/22065
- https://nvd.nist.gov/vuln/detail/CVE-2006-0297