CVE-2006-6504

2006-12-2000:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.921

Percentile

99.0%

JSON

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey
before 1.0.7 allows remote attackers to execute arbitrary code by appending
an SVG comment DOM node to another type of document, which triggers memory
corruption.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1UNKNOWN
ubuntu6.10noarchfirefox< 2.0.0.6+0dfsg-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchfirefox< 2.0.0.6+1-0ubuntu1UNKNOWN
ubuntu7.10noarchfirefox-3.0< 3.0~alpha7-0ubuntu6UNKNOWN
ubuntu7.10noarchiceape< 1.1.4-1ubuntu2UNKNOWN
ubuntu7.10noarchlightning-sunbird< 0.5-0ubuntu4UNKNOWN
ubuntu7.10noarchmidbrowser< 0.1.6b-0ubuntu2UNKNOWN
ubuntu7.04noarchxulrunner< 1.8.0.10-3ubuntu1UNKNOWN
ubuntu7.10noarchxulrunner< 1.8.0.10-3ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1	UNKNOWN
ubuntu	6.10	noarch	firefox	< 2.0.0.6+0dfsg-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	firefox	< 2.0.0.6+1-0ubuntu1	UNKNOWN
ubuntu	7.10	noarch	firefox-3.0	< 3.0~alpha7-0ubuntu6	UNKNOWN
ubuntu	7.10	noarch	iceape	< 1.1.4-1ubuntu2	UNKNOWN
ubuntu	7.10	noarch	lightning-sunbird	< 0.5-0ubuntu4	UNKNOWN
ubuntu	7.10	noarch	midbrowser	< 0.1.6b-0ubuntu2	UNKNOWN
ubuntu	7.04	noarch	xulrunner	< 1.8.0.10-3ubuntu1	UNKNOWN
ubuntu	7.10	noarch	xulrunner	< 1.8.0.10-3ubuntu1	UNKNOWN