p PatchFirst

CVE-2006-2779

CVE-2006-2779

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) "Content-implemented tree views," (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.

EPSS 7.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • thunderbird Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.5.0.4-1

    Update to 1.5.0.4-1

  • thunderbird Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.5.0.4-1

    Update to 1.5.0.4-1

  • thunderbird Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.5.0.4-1

    Update to 1.5.0.4-1

Original sources

Check your server →