Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 9.3 | HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| Hyperlink | Source | Resource |
|---|---|---|
| ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc | secalert@redhat.com | Broken Link |
| http://fedoranews.org/cms/node/2297 | secalert@redhat.com | Broken Link |
| http://fedoranews.org/cms/node/2338 | secalert@redhat.com | Broken Link |
| http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 | secalert@redhat.com | Broken Link |
| http://rhn.redhat.com/errata/RHSA-2006-0758.html | secalert@redhat.com | Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2006-0759.html | secalert@redhat.com | Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2006-0760.html | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23282 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23422 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23433 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23439 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23440 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23468 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23514 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23545 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23589 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23601 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23614 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23618 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23672 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/23692 | secalert@redhat.com | Third Party Advisory |
| http://security.gentoo.org/glsa/glsa-200701-02.xml | secalert@redhat.com | Third Party Advisory |
| http://securitytracker.com/id?1017417 | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://securitytracker.com/id?1017418 | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml | secalert@redhat.com | Third Party Advisory |
| http://www.kb.cert.org/vuls/id/928956 | secalert@redhat.com | Third Party Advisory US Government Resource |
| http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 | secalert@redhat.com | Third Party Advisory |
| http://www.mozilla.org/security/announce/2006/mfsa2006-73.html | secalert@redhat.com | Vendor Advisory |
| http://www.novell.com/linux/security/advisories/2006_80_mozilla.html | secalert@redhat.com | Broken Link |
| http://www.novell.com/linux/security/advisories/2007_06_mozilla.html | secalert@redhat.com | Broken Link |
| http://www.securityfocus.com/archive/1/454939/100/0/threaded | secalert@redhat.com | N/A |
| http://www.securityfocus.com/archive/1/455145/100/0/threaded | secalert@redhat.com | N/A |
| http://www.securityfocus.com/archive/1/455728/100/200/threaded | secalert@redhat.com | N/A |
| http://www.securityfocus.com/bid/21668 | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://www.ubuntu.com/usn/usn-398-1 | secalert@redhat.com | Third Party Advisory |
| http://www.ubuntu.com/usn/usn-398-2 | secalert@redhat.com | Third Party Advisory |
| http://www.us-cert.gov/cas/techalerts/TA06-354A.html | secalert@redhat.com | Third Party Advisory US Government Resource |
| http://www.vupen.com/english/advisories/2006/5068 | secalert@redhat.com | Third Party Advisory |
| http://www.vupen.com/english/advisories/2008/0083 | secalert@redhat.com | Third Party Advisory |
| http://www.zerodayinitiative.com/advisories/ZDI-06-051.html | secalert@redhat.com | Third Party Advisory VDB Entry |
| https://issues.rpath.com/browse/RPL-883 | secalert@redhat.com | Broken Link |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11077 | secalert@redhat.com | Third Party Advisory |
| ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://fedoranews.org/cms/node/2297 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://fedoranews.org/cms/node/2338 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://rhn.redhat.com/errata/RHSA-2006-0758.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2006-0759.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2006-0760.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23282 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23422 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23433 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23439 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23440 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23468 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23514 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23545 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23589 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23601 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23614 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23618 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23672 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/23692 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://security.gentoo.org/glsa/glsa-200701-02.xml | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://securitytracker.com/id?1017417 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://securitytracker.com/id?1017418 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.kb.cert.org/vuls/id/928956 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory US Government Resource |
| http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mozilla.org/security/announce/2006/mfsa2006-73.html | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| http://www.novell.com/linux/security/advisories/2006_80_mozilla.html | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://www.novell.com/linux/security/advisories/2007_06_mozilla.html | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://www.securityfocus.com/archive/1/454939/100/0/threaded | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securityfocus.com/archive/1/455145/100/0/threaded | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securityfocus.com/archive/1/455728/100/200/threaded | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securityfocus.com/bid/21668 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.ubuntu.com/usn/usn-398-1 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.ubuntu.com/usn/usn-398-2 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.us-cert.gov/cas/techalerts/TA06-354A.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory US Government Resource |
| http://www.vupen.com/english/advisories/2006/5068 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.vupen.com/english/advisories/2008/0083 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.zerodayinitiative.com/advisories/ZDI-06-051.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| https://issues.rpath.com/browse/RPL-883 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11077 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |