CVE-2006-0749: Critical severity Mozilla Firefox vulnerability
nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0749?
CVE-2006-0749 is classified as a denial of service vulnerability that can potentially allow the execution of arbitrary code.
How do I fix CVE-2006-0749?
To fix CVE-2006-0749, update to the latest version of Mozilla Firefox, Thunderbird, Mozilla Suite, or SeaMonkey that is not affected by this vulnerability.
What versions are affected by CVE-2006-0749?
CVE-2006-0749 affects Mozilla Firefox versions before 1.5, Thunderbird versions before 1.0.8, Mozilla Suite versions before 1.7.13, and SeaMonkey versions before 1.0.
Can CVE-2006-0749 lead to data loss?
Yes, an exploit of CVE-2006-0749 could lead to a crash of the application and potential data loss for unsaved user data.
How can attackers exploit CVE-2006-0749?
Attackers can exploit CVE-2006-0749 using unknown vectors that trigger a specific sequence within affected versions of the software.