CVE-2006-6500: Buffer Overflow
Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6500?
CVE-2006-6500 is classified as having a moderate severity level, as it can lead to denial of service and potentially arbitrary code execution.
How do I fix CVE-2006-6500?
To remediate CVE-2006-6500, upgrade to the latest version of Mozilla Firefox, Thunderbird, or SeaMonkey that is not affected by this vulnerability.
What versions of software are affected by CVE-2006-6500?
CVE-2006-6500 affects Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7.
What types of attacks can exploit CVE-2006-6500?
CVE-2006-6500 can be exploited through crafted images in CSS cursor properties that can crash the application and may lead to code execution.
What are the potential consequences of CVE-2006-6500?
The potential consequences of CVE-2006-6500 include application crashes and unauthorized execution of arbitrary code on the affected system.