CVE-2006-2780

Impact

Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "jsstr tagify," which leads to memory corruption.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://rhn.redhat.com/errata/RHSA-2006-0609.html
• http://secunia.com/advisories/20376
• http://secunia.com/advisories/20382
• http://secunia.com/advisories/20561
• http://secunia.com/advisories/20709
• http://secunia.com/advisories/21134
• http://secunia.com/advisories/21176
• http://secunia.com/advisories/21178
• http://secunia.com/advisories/21183
• http://secunia.com/advisories/21188
• http://secunia.com/advisories/21210
• http://secunia.com/advisories/21269
• http://secunia.com/advisories/21270
• http://secunia.com/advisories/21324
• http://secunia.com/advisories/21336
• http://secunia.com/advisories/21532
• http://secunia.com/advisories/21607
• http://secunia.com/advisories/21631
• http://secunia.com/advisories/22065
• http://secunia.com/advisories/22066
• http://secunia.com/advisories/27216
• http://securitytracker.com/id?1016202
• http://securitytracker.com/id?1016214
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200387-1