CVEvulnerability
CVE-2006-0295
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.
Affected configurations
• mozilla firefox 1.5
• mozilla seamonkey 1.0
• mozilla thunderbird 1.5
References
- http://secunia.com/advisories/18700 secunia.com
- http://secunia.com/advisories/18704 secunia.com
- http://secunia.com/advisories/22065 secunia.com
- http://securitytracker.com/id?1015570 securitytracker.com
- http://www.kb.cert.org/vuls/id/759273 US Government Resource
- http://www.mozilla.org/security/announce/2006/mfsa2006-04.html www.mozilla.org
- http://www.securityfocus.com/archive/1/446657/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16476 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-038A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/0413 www.vupen.com
- http://www.vupen.com/english/advisories/2006/3749 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=319296 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24433 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562 oval.cisecurity.org
- http://secunia.com/advisories/18700 secunia.com
- http://secunia.com/advisories/18704 secunia.com
- http://secunia.com/advisories/22065 secunia.com
- http://securitytracker.com/id?1015570 securitytracker.com
- http://www.kb.cert.org/vuls/id/759273 US Government Resource
- http://www.mozilla.org/security/announce/2006/mfsa2006-04.html www.mozilla.org
- http://www.securityfocus.com/archive/1/446657/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16476 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-038A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/0413 www.vupen.com
- http://www.vupen.com/english/advisories/2006/3749 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=319296 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24433 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562 oval.cisecurity.org