CVE

Id
16401  
CVE No.
CVE-2006-0297  
Status
Candidate  
Description
Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the (1) EscapeAttributeValue in jsxml.c for E4X, (2) nsSVGCairoSurface::Init in SVG, and (3) nsCanvasRenderingContext2D.cpp in Canvas.  
Phase
Assigned (20060118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
131243 16401 CVE-2006-0297 CONFIRM:http://www.mozilla.org/security/announce/2006/mfsa2006-06.html  View
131244 16401 CVE-2006-0297 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=319872  View
131245 16401 CVE-2006-0297 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=322215  View
131246 16401 CVE-2006-0297 HP:HPSBUX02156  View
131247 16401 CVE-2006-0297 URL:http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded  View
131248 16401 CVE-2006-0297 HP:SSRT061236  View
131249 16401 CVE-2006-0297 URL:http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded  View
131250 16401 CVE-2006-0297 BID:16476  View
131251 16401 CVE-2006-0297 URL:http://www.securityfocus.com/bid/16476  View
131252 16401 CVE-2006-0297 VUPEN:ADV-2006-0413  View
131253 16401 CVE-2006-0297 URL:http://www.vupen.com/english/advisories/2006/0413  View
131254 16401 CVE-2006-0297 VUPEN:ADV-2006-3749  View
131255 16401 CVE-2006-0297 URL:http://www.vupen.com/english/advisories/2006/3749  View
131256 16401 CVE-2006-0297 OVAL:oval:org.mitre.oval:def:1339  View
131257 16401 CVE-2006-0297 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1339  View
131258 16401 CVE-2006-0297 SECTRACK:1015570  View
131259 16401 CVE-2006-0297 URL:http://securitytracker.com/id?1015570  View
131260 16401 CVE-2006-0297 SECUNIA:18700  View
131261 16401 CVE-2006-0297 URL:http://secunia.com/advisories/18700  View
131262 16401 CVE-2006-0297 SECUNIA:18704  View
131263 16401 CVE-2006-0297 URL:http://secunia.com/advisories/18704  View
131264 16401 CVE-2006-0297 SECUNIA:22065  View
131265 16401 CVE-2006-0297 URL:http://secunia.com/advisories/22065  View
131266 16401 CVE-2006-0297 XF:mozilla-component-integer-overflow(24435)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57889 JVNDB-2006-000085 Mozilla 製品における同一生成元制限によるアクセス制限を回避される脆弱性 ------------ CVE-2006-0299 16401 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000085.html  View