NetSight
IP …
medium6.8

CVE-2006-6500

Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote at…

Impact

Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.

Affected products

VendorProductAffected versions
MozillaFirefox
from 1.5 before 1.5.0.9
from 2.0 before 2.0.0.1
MozillaSeamonkey
before 1.0.7
MozillaThunderbird
before 1.5.0.9
DebianDebian Linux
Versions 3.1, 4.0
CanonicalUbuntu Linux
Versions 5.10, 6.06, 6.10

Weakness classification

CWE-119

References