CVE

Id
16402  
CVE No.
CVE-2006-0298  
Status
Candidate  
Description
The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly read sensitive data via unknown attack vectors that trigger an out-of-bounds read.  
Phase
Assigned (20060118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
131267 16402 CVE-2006-0298 CONFIRM:http://www.mozilla.org/security/announce/2006/mfsa2006-07.html  View
131268 16402 CVE-2006-0298 HP:HPSBUX02156  View
131269 16402 CVE-2006-0298 URL:http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded  View
131270 16402 CVE-2006-0298 HP:SSRT061236  View
131271 16402 CVE-2006-0298 URL:http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded  View
131272 16402 CVE-2006-0298 BID:16476  View
131273 16402 CVE-2006-0298 URL:http://www.securityfocus.com/bid/16476  View
131274 16402 CVE-2006-0298 VUPEN:ADV-2006-0413  View
131275 16402 CVE-2006-0298 URL:http://www.vupen.com/english/advisories/2006/0413  View
131276 16402 CVE-2006-0298 VUPEN:ADV-2006-3749  View
131277 16402 CVE-2006-0298 URL:http://www.vupen.com/english/advisories/2006/3749  View
131278 16402 CVE-2006-0298 OVAL:oval:org.mitre.oval:def:677  View
131279 16402 CVE-2006-0298 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:677  View
131280 16402 CVE-2006-0298 SECTRACK:1015570  View
131281 16402 CVE-2006-0298 URL:http://securitytracker.com/id?1015570  View
131282 16402 CVE-2006-0298 SECUNIA:18700  View
131283 16402 CVE-2006-0298 URL:http://secunia.com/advisories/18700  View
131284 16402 CVE-2006-0298 SECUNIA:18704  View
131285 16402 CVE-2006-0298 URL:http://secunia.com/advisories/18704  View
131286 16402 CVE-2006-0298 SECUNIA:22065  View
131287 16402 CVE-2006-0298 URL:http://secunia.com/advisories/22065  View
131288 16402 CVE-2006-0298 XF:mozilla-xml-parser-dos(24436)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62193 JVNDB-2005-000395 GNU Tar の PAX 拡張ヘッダの処理におけるバッファオーバーフローの脆弱性 GNU Tar の xheader.c には、PAX 拡張ヘッダの処理において calloc() 関数を呼び出す際に、境界チェックが適切に行われていないため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-0300 16402 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000395.html  View