CVE-2006-1730
NoneCVSS
—
EPSS
10.3%
Published
Apr 14, 2006
CISA due date
—
The record
Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:11 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:12 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:13 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:3.1 | mozilla | 0 | 2:1.7.8-1sarge5 |
| Debian:3.1 | mozilla-firefox | 0 | 1.0.4-2sarge6 |
| Debian:3.1 | mozilla-thunderbird | 0 | 1.0.2-2.sarge1.0.8 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.9.2-2.4.8 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.0.8-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.0.8-1.4.1 |
Related vulnerabilities
- CVE-2024-5696 By manipulating the text in an `input` tag, an attacker could have caused corrupt memory… Also affects thunderbird
- CVE-2024-5700 Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Also affects thunderbird
- CVE-2024-5702 Memory corruption in the networking stack could have led to a potentially exploitable… Also affects thunderbird
- CVE-2024-5693 Offscreen Canvas did not properly track cross-origin tainting, which could be used to… Also affects thunderbird
- CVE-2024-5688 If a garbage collection was triggered at the right time, a use-after-free could have… Also affects thunderbird
- CVE-2024-5691 By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have… Also affects thunderbird
- CVE-2024-5690 By monitoring the time certain operations take, an attacker could have guessed which… Also affects thunderbird
- CVE-2024-4777 Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Also affects thunderbird