CVEvulnerability
CVE-2006-1730
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-04-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow.
Affected configurations
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla mozilla suite 1.7.6
• mozilla mozilla suite 1.7.7
• mozilla mozilla suite 1.7.8
• mozilla mozilla suite 1.7.10
• mozilla mozilla suite 1.7.11
• mozilla mozilla suite 1.7.12
• mozilla seamonkey 1.0
• mozilla thunderbird 1.0
• mozilla thunderbird 1.0.1
• mozilla thunderbird 1.0.2
• mozilla thunderbird 1.0.3
• mozilla thunderbird 1.0.4
• mozilla thunderbird 1.0.5
• mozilla thunderbird 1.0.6
• mozilla thunderbird 1.0.7
• mozilla thunderbird 1.5
• mozilla thunderbird 1.5.0.1
Related
Weakness · not in database (1)
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt ftp.sco.com
- ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc patches.sgi.com
- http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html lists.suse.com
- http://secunia.com/advisories/19631 Patch, Vendor Advisory
- http://secunia.com/advisories/19649 Patch, Vendor Advisory
- http://secunia.com/advisories/19696 secunia.com
- http://secunia.com/advisories/19714 Vendor Advisory
- http://secunia.com/advisories/19721 Vendor Advisory
- http://secunia.com/advisories/19729 secunia.com
- http://secunia.com/advisories/19746 Vendor Advisory
- http://secunia.com/advisories/19759 Vendor Advisory
- http://secunia.com/advisories/19780 secunia.com
- http://secunia.com/advisories/19794 Vendor Advisory
- http://secunia.com/advisories/19811 Vendor Advisory
- http://secunia.com/advisories/19821 Vendor Advisory
- http://secunia.com/advisories/19823 Vendor Advisory
- http://secunia.com/advisories/19852 Vendor Advisory
- http://secunia.com/advisories/19862 Vendor Advisory
- http://secunia.com/advisories/19863 Vendor Advisory
- http://secunia.com/advisories/19902 Vendor Advisory
- http://secunia.com/advisories/19941 Vendor Advisory
- http://secunia.com/advisories/19950 Vendor Advisory
- http://secunia.com/advisories/20051 secunia.com
- http://secunia.com/advisories/21033 Vendor Advisory
- http://secunia.com/advisories/21622 secunia.com
- http://secunia.com/advisories/22065 secunia.com
- http://secunia.com/advisories/22066 secunia.com
- http://securityreason.com/securityalert/720 securityreason.com
- http://securitytracker.com/id?1015915 Patch
- http://securitytracker.com/id?1015916 Patch
- http://securitytracker.com/id?1015917 Patch
- http://securitytracker.com/id?1015918 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 sunsolve.sun.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm support.avaya.com
- http://www.debian.org/security/2006/dsa-1044 www.debian.org
- http://www.debian.org/security/2006/dsa-1046 www.debian.org
- http://www.debian.org/security/2006/dsa-1051 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml www.gentoo.org
- http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml www.gentoo.org
- http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml www.gentoo.org
- http://www.kb.cert.org/vuls/id/179014 Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 www.mandriva.com
- http://www.mozilla.org/security/announce/2006/mfsa2006-22.html Vendor Advisory
- http://www.novell.com/linux/security/advisories/2006_04_25.html www.novell.com
- http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html www.redhat.com
- http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0328.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2006-0329.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2006-0330.html Vendor Advisory
- http://www.securityfocus.com/archive/1/431060/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/434524/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/436296/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/436338/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/438730/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446657/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446658/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17516 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-107A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/1356 www.vupen.com
- http://www.vupen.com/english/advisories/2006/3391 www.vupen.com
- http://www.vupen.com/english/advisories/2006/3748 www.vupen.com
- http://www.vupen.com/english/advisories/2006/3749 www.vupen.com
- http://www.vupen.com/english/advisories/2008/0083 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-010.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25826 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10055 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1614 oval.cisecurity.org
- https://usn.ubuntu.com/271-1/ usn.ubuntu.com
- https://usn.ubuntu.com/275-1/ usn.ubuntu.com
- https://usn.ubuntu.com/276-1/ usn.ubuntu.com
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt ftp.sco.com
- ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc patches.sgi.com
- http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html lists.suse.com
- http://secunia.com/advisories/19631 Patch, Vendor Advisory
- http://secunia.com/advisories/19649 Patch, Vendor Advisory
- http://secunia.com/advisories/19696 secunia.com
- http://secunia.com/advisories/19714 Vendor Advisory