CVE-2006-6504
Fixed in a distro release EPSS 9%
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
Products: mozilla firefox, mozilla seamonkey, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | firefox-esr | 45.0esr-1 |
| Debian 13 | firefox-esr | 45.0esr-1 |
| Debian 14 | firefox-esr | 45.0esr-1 |
| Red Hat Enterprise Linux 2.1 | seamonkey | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-chat | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-devel | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-dom-inspector | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-js-debugger | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-mail | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr-devel | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss-devel | 0:1.0.7-0.1.el2 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.7-0.1.el3 |
| Red Hat Enterprise Linux 4 | devhelp | 0:0.10-0.6.el4 |
| Red Hat Enterprise Linux 4 | devhelp-debuginfo | 0:0.10-0.6.el4 |
| Red Hat Enterprise Linux 4 | devhelp-devel | 0:0.10-0.6.el4 |
| Red Hat Enterprise Linux 4 | firefox | 0:1.5.0.9-0.1.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:1.5.0.9-0.1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.7-0.1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.7-0.1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.7-0.1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.7-0.1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.7-0.1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.7-0.1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.7-0.1.el4 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.9-0.1.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.9-0.1.el4 |