CVE-2006-5633: Medium severity Mozilla Firefox vulnerability
Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service (crash) by creating a range object using createRange, calling selectNode on a DocType node (DOCUMENTTYPENODE), then calling createContextualFragment on the range, which triggers a null dereference. NOTE: the original Bugtraq post mentioned that code execution was possible, but followup analysis has shown that it is only a null dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5633?
CVE-2006-5633 is classified as a denial of service vulnerability that can cause a crash in the affected applications.
How do I fix CVE-2006-5633?
To fix CVE-2006-5633, upgrade to a patched version of Mozilla Firefox or SeaMonkey that resolves this issue.
Which versions are affected by CVE-2006-5633?
CVE-2006-5633 affects Mozilla Firefox versions 1.5.0.7 and 2.0 and SeaMonkey version 1.1-beta.
What type of attack does CVE-2006-5633 involve?
CVE-2006-5633 involves a remote denial of service attack that exploits a flaw in the handling of range objects.
Can CVE-2006-5633 be exploited remotely?
Yes, CVE-2006-5633 allows remote attackers to exploit the vulnerability, resulting in a crash of the affected applications.