CVE-2006-0294: High severity Mozilla Firefox vulnerability
Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0294?
CVE-2006-0294 is considered a critical vulnerability allowing remote code execution.
How do I fix CVE-2006-0294?
To fix CVE-2006-0294, update Mozilla Firefox, Mozilla Thunderbird, or SeaMonkey to the latest version that addresses this vulnerability.
What versions are affected by CVE-2006-0294?
CVE-2006-0294 affects various versions of Mozilla Firefox before 1.5.0.1, Thunderbird 1.5, and SeaMonkey before 1.0.
What type of vulnerability is CVE-2006-0294?
CVE-2006-0294 is a memory corruption vulnerability due to improper handling of the CSS 'position' property.
Can CVE-2006-0294 be exploited remotely?
Yes, CVE-2006-0294 can be exploited remotely by an attacker through a crafted web page or email.