26303 : Mozilla Multiple Products DOMNodeRemoved Mutation Event Memory Corruption
Printer | http://osvdb.org/26303 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
3	660	almost 7 years ago	about 4 years ago	0 times	15%

This Entry needs help! It is only 15% Complete. Click the edit link above to add more information.

Contributing is fast and easy, and benefits the entire security community.

Timeline

Disclosure Date
2006-06-01

Description

<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2006-2779" target="_blank">CVE</a>)</em> : Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) "Content-implemented tree views," (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified

Products

Unknown or Incomplete

References

Security Tracker: 1016202 1016214
Bugtraq ID: 18228
CVE ID: 2006-2779 (see also: NVD)
Secunia Advisory ID: 20376 20382 20394 20561 20709 21134 21176 21178 21183 21188 21210 21269 21270 21324 21336 21532 21607 21631 21634 21654 22065 22066 27216
Related OSVDB ID: 26301 26302 26304 26305 26306 26307
CERT VU: 466673
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-01/0085.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0696.html
Other Advisory URL: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1
http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:146
http://www.ubuntu.com/usn/usn-296-2
http://www.us.debian.org/security/2006/dsa-1118
http://www.us.debian.org/security/2006/dsa-1120
http://www.us.debian.org/security/2006/dsa-1134
Vendor Specific News/Changelog Entry: http://www.caminobrowser.org/releases/1.0.2.php
https://bugzilla.mozilla.org/show_bug.cgi?id=325730
https://bugzilla.mozilla.org/show_bug.cgi?id=329982
Vendor Specific Advisory URL: http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
http://www.mozilla.org/security/announce/2006/mfsa2006-32.html
http://www.ubuntu.com/usn/usn-297-3
http://www.ubuntu.com/usn/usn-323-1
http://www.us.debian.org/security/2006/dsa-1159
http://www.us.debian.org/security/2006/dsa-1160
RedHat RHSA: RHSA-2006:0578 RHSA-2006:0594 RHSA-2006:0609 RHSA-2006:0610 RHSA-2006:0611

Tools & Filters

	21627 21628 21629 21705 21734 22088 22121 22122 22150 22291 22660 22662 22676 22701 22702 23892 23894 27112 27124 27868 27869 27870 27872 27901
	3636 3637 3638 3694 3695

Credit

Unknown or Incomplete

CVSSv2 Score

CVSSv2 Base Score = 9.3
Source: nvd.nist.gov | Generated: 2006-06-04 | Disagree?

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.