CVEvulnerability
CVE-2006-6500
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-12-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.
Affected configurations
• mozilla firefox (>= 1.5 < 1.5.0.9)
• mozilla firefox (>= 2.0 < 2.0.0.1)
• mozilla seamonkey (< 1.0.7)
• mozilla thunderbird (< 1.5.0.9)
• debian debian linux 3.1
• debian debian linux 4.0
• canonical ubuntu linux 5.10
• canonical ubuntu linux 6.06
• canonical ubuntu linux 6.10
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link
- http://secunia.com/advisories/23282 Third Party Advisory
- http://secunia.com/advisories/23420 Third Party Advisory
- http://secunia.com/advisories/23422 Third Party Advisory
- http://secunia.com/advisories/23545 Third Party Advisory
- http://secunia.com/advisories/23598 Third Party Advisory
- http://secunia.com/advisories/23614 Third Party Advisory
- http://secunia.com/advisories/23672 Third Party Advisory
- http://secunia.com/advisories/23692 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200701-02.xml Third Party Advisory
- http://securitytracker.com/id?1017399 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1017400 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1017401 Third Party Advisory, VDB Entry
- http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml Third Party Advisory
- http://www.kb.cert.org/vuls/id/722244 Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:011 Third Party Advisory
- http://www.mozilla.org/security/announce/2006/mfsa2006-69.html Vendor Advisory
- http://www.novell.com/linux/security/advisories/2006_80_mozilla.html Broken Link
- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html Broken Link
- http://www.securityfocus.com/bid/21668 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA06-354A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/5068 Third Party Advisory
- http://www.vupen.com/english/advisories/2008/0083 Third Party Advisory
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link
- http://secunia.com/advisories/23282 Third Party Advisory
- http://secunia.com/advisories/23420 Third Party Advisory
- http://secunia.com/advisories/23422 Third Party Advisory
- http://secunia.com/advisories/23545 Third Party Advisory
- http://secunia.com/advisories/23598 Third Party Advisory
- http://secunia.com/advisories/23614 Third Party Advisory
- http://secunia.com/advisories/23672 Third Party Advisory
- http://secunia.com/advisories/23692 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200701-02.xml Third Party Advisory
- http://securitytracker.com/id?1017399 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1017400 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1017401 Third Party Advisory, VDB Entry
- http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml Third Party Advisory
- http://www.kb.cert.org/vuls/id/722244 Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:011 Third Party Advisory
- http://www.mozilla.org/security/announce/2006/mfsa2006-69.html Vendor Advisory
- http://www.novell.com/linux/security/advisories/2006_80_mozilla.html Broken Link
- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html Broken Link
- http://www.securityfocus.com/bid/21668 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA06-354A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/5068 Third Party Advisory
- http://www.vupen.com/english/advisories/2008/0083 Third Party Advisory