NetSight
IP …
critical9.3

CVE-2006-1730

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows r…

Impact

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
MozillaMozilla Suite
Versions 1.7.6, 1.7.7, 1.7.8, 1.7.10, 1.7.11, 1.7.12
MozillaSeamonkey
Version 1.0
MozillaThunderbird
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5

Weakness classification

CWE-189

References