CVE-2006-0749
NoneCVSS
—
EPSS
10.5%
Published
Apr 14, 2006
CISA due date
—
The record
nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:11 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:12 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:13 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:14 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:3.1 | mozilla | 0 | 2:1.7.8-1sarge5 |
| Debian:3.1 | mozilla-firefox | 0 | 1.0.4-2sarge6 |
| Debian:3.1 | mozilla-thunderbird | 0 | 1.0.2-2.sarge1.0.8 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.0.8-1.4.1 |
Related vulnerabilities
- CVE-2024-5696 By manipulating the text in an `input` tag, an attacker could have caused corrupt memory… Also affects thunderbird
- CVE-2024-5700 Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Also affects thunderbird
- CVE-2024-5702 Memory corruption in the networking stack could have led to a potentially exploitable… Also affects thunderbird
- CVE-2024-5693 Offscreen Canvas did not properly track cross-origin tainting, which could be used to… Also affects thunderbird
- CVE-2024-5688 If a garbage collection was triggered at the right time, a use-after-free could have… Also affects thunderbird
- CVE-2024-5691 By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have… Also affects thunderbird
- CVE-2024-5690 By monitoring the time certain operations take, an attacker could have guessed which… Also affects thunderbird
- CVE-2024-4777 Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Also affects thunderbird