CVE-2006-0749

nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey…

High9.3EPSS 10.5%

Published: 14 Apr 2006
Updated: 7 Aug 2024
Reserved: 17 Feb 2006
Assigned by: redhat

Description

nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.

Scores

CVSS scores of CVE-2006-0749, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Analyzed	2.0	High9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS (exploitation in 30 days): 10.5% · top 4.2% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

Affected products

n/a
- affected n/a

References (59)

http://www.mozilla.org/security/announce/2006/mfsa2006-18.html (opens in a new tab)x_refsource_CONFIRMx_transferred
USN-275-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
oval:org.mitre.oval:def:11704 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
RHSA-2006:0330 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
SSRT061145 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
19902 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
USN-276-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
HPSBUX02122 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
19941 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
19780 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
RHSA-2006:0328 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
19821 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
GLSA-200604-12 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
21622 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
19862 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
MDKSA-2006:075 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
19823 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
DSA-1051 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
FEDORA-2006-410 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
USN-271-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
19714 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
RHSA-2006:0329 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
GLSA-200604-18 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
19811 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
19794 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
19746 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
21033 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
102550 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
19696 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
20060417 ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
19759 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
SUSE-SA:2006:021 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
FLSA:189137-2 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
ADV-2006-1356 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
mozilla-nshtmlcontentsink-memory-corruption(25819) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
VU#736934 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
MDKSA-2006:078 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
19729 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
729 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
oval:org.mitre.oval:def:1848 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
20051 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
19863 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
TA06-107A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
FLSA:189137-1 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
17516 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
228526 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
FEDORA-2006-411 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
19852 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
19721 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
SUSE-SA:2006:022 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
GLSA-200605-09 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
ADV-2006-3391 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
19631 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
19950 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
http://www.zerodayinitiative.com/advisories/ZDI-06-009.html (opens in a new tab)x_refsource_MISCx_transferred
MDKSA-2006:076 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
DSA-1046 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
DSA-1044 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2006-0749](https://trackcve.app/badge/CVE-2006-0749.svg)](https://trackcve.app/cve/CVE-2006-0749)

Record last updated 7 Aug 2024, 16:48 UTC.