CVE-2006-6500

CVE-2006-6500

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 8.6%
exploitation probability
8.6%top 5% of all CVEs
observed exploitation
nono source reports it
Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.
Affected products
n/a · n/a
References
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742http://secunia.com/advisories/23282http://secunia.com/advisories/23420http://secunia.com/advisories/23422http://secunia.com/advisories/23545http://secunia.com/advisories/23598http://secunia.com/advisories/23614http://secunia.com/advisories/23672http://secunia.com/advisories/23692http://security.gentoo.org/glsa/glsa-200701-02.xmlhttp://securitytracker.com/id?1017399http://securitytracker.com/id?1017400