CVE-2006-0297 - Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the (1) EscapeAttributeValue in jsxml.c for E4X, (2) nsSVGCairoSurface::Init in SVG, and (3) nsCanvasRenderingContext2D.cpp in Canvas

Back Back to CVE browser

MEDIUM

Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the (1) EscapeAttributeValue in jsxml.c for E4X, (2) nsSVGCairoSurface::Init in SVG, and (3) nsCanvasRenderingContext2D.cpp in Canvas

Published Feb 2, 2006

5.1

MEDIUM

CVSS 2.0

EPSS 3.94%

Description

Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the (1) EscapeAttributeValue in jsxml.c for E4X, (2) nsSVGCairoSurface::Init in SVG, and (3) nsCanvasRenderingContext2D.cpp in Canvas.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (13)

http://secunia.com/advisories/18700
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18704
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22065
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1015570
vdb-entryx_refsource_SECTRACK
http://www.mozilla.org/security/announce/2006/mfsa2006-06.html
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/446657/100/200/threaded
vendor-advisoryx_refsource_HP
http://www.securityfocus.com/bid/16476
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0413
vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/3749
vdb-entryx_refsource_VUPEN
https://bugzilla.mozilla.org/show_bug.cgi?id=319872
x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=322215
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/24435
vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1339
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://secunia.com/advisories/18700		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18704		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22065		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1015570		vdb-entryx_refsource_SECTRACK
http://www.mozilla.org/security/announce/2006/mfsa2006-06.html		x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/446657/100/200/threaded		vendor-advisoryx_refsource_HP
http://www.securityfocus.com/bid/16476		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0413		vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/3749		vdb-entryx_refsource_VUPEN
https://bugzilla.mozilla.org/show_bug.cgi?id=319872		x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=322215		x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/24435		vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1339		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published Feb 2, 2006

Updated Aug 7, 2024

Reserved Jan 18, 2006

Link CVE-2006-0297

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0297

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-0297