PT-2006-2731

CVE-2006-1739

·

Published

2006-04-14

·

Updated

2018-10-18

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 1.0.x through 1.0.7 Mozilla Firefox versions 1.x through 1.4 Mozilla Thunderbird versions 1.0.x through 1.0.7 Mozilla Thunderbird versions 1.x through 1.4 Mozilla Suite versions prior to 1.7.13 SeaMonkey versions prior to 1.0
Description: The issue is related to the CSS border-rendering code, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that cause an out-of-bounds array write and buffer overflow.
Recommendations: For Mozilla Firefox versions 1.0.x through 1.0.7, update to version 1.0.8 or later. For Mozilla Firefox versions 1.x through 1.4, update to version 1.5 or later. For Mozilla Thunderbird versions 1.0.x through 1.0.7, update to version 1.0.8 or later. For Mozilla Thunderbird versions 1.x through 1.4, update to version 1.5 or later. For Mozilla Suite versions prior to 1.7.13, update to version 1.7.13 or later. For SeaMonkey versions prior to 1.0, update to version 1.0 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
DSA-1044-1
DSA-1046-1
DSA-1051-1
HPSBUX02122
RHSA-2006:0328
RHSA-2006_0328
RHSA-2006:0329
RHSA-2006_0329
RHSA-2006:0330
RHSA-2006_0330
Found an issue in the description? Have something to add? Feel free to write us 👾