CVE-2006-2777

Impact

Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/20376
• http://secunia.com/advisories/20394
• http://secunia.com/advisories/20561
• http://secunia.com/advisories/21176
• http://secunia.com/advisories/21178
• http://secunia.com/advisories/21183
• http://secunia.com/advisories/21188
• http://secunia.com/advisories/21324
• http://secunia.com/advisories/21532
• http://secunia.com/advisories/22066
• http://securitytracker.com/id?1016202
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1
• http://www.debian.org/security/2006/dsa-1118
• http://www.debian.org/security/2006/dsa-1120
• http://www.debian.org/security/2006/dsa-1134
• http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml
• http://www.kb.cert.org/vuls/id/237257
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:145
• http://www.mozilla.org/security/announce/2006/mfsa2006-43.html
• http://www.novell.com/linux/security/advisories/2006_35_mozilla.html
• http://www.securityfocus.com/archive/1/435795/100/0/threaded
• http://www.securityfocus.com/archive/1/446658/100/200/threaded
• http://www.securityfocus.com/bid/18228
• http://www.us-cert.gov/cas/techalerts/TA06-153A.html