CVE-2006-1739
Detail
Deferred
This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
Current Description
The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that causes an out-of-bounds array write and buffer overflow.
View Analysis Description
Analysis
Description
The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that causes an out-of-bounds array write.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
Vector:
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Evaluator Solution
Fixed in: Firefox 1.5
Firefox 1.0.8
Thunderbird 1.5
Thunderbird 1.0.8
SeaMonkey 1.0
Mozilla Suite 1.7.13
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected] .
URL
Source(s)
Tag(s)
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt
CVE, Inc., Red Hat
ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc
CVE, Inc., Red Hat
http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
CVE, Inc., Red Hat
http://secunia.com/advisories/19631
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/19696
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19714
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19721
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19729
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19746
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19759
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19780
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19794
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19811
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19821
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19823
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19852
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19862
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19863
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19902
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19941
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19950
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/20051
CVE, Inc., Red Hat
http://secunia.com/advisories/21033
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/21622
CVE, Inc., Red Hat
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
CVE, Inc., Red Hat
http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
CVE, Inc., Red Hat
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
CVE, Inc., Red Hat
http://www.debian.org/security/2006/dsa-1044
CVE, Inc., Red Hat
http://www.debian.org/security/2006/dsa-1046
CVE, Inc., Red Hat
http://www.debian.org/security/2006/dsa-1051
CVE, Inc., Red Hat
http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml
CVE, Inc., Red Hat
http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml
CVE, Inc., Red Hat
http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml
CVE, Inc., Red Hat
http://www.kb.cert.org/vuls/id/935556
CVE, Inc., Red Hat
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2006:075
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:076
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:078
CVE, Inc., Red Hat
http://www.mozilla.org/security/announce/2006/mfsa2006-11.html
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_04_25.html
CVE, Inc., Red Hat
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html
CVE, Inc., Red Hat
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html
CVE, Inc., Red Hat
http://www.redhat.com/support/errata/RHSA-2006-0328.html
CVE, Inc., Red Hat
http://www.redhat.com/support/errata/RHSA-2006-0329.html
CVE, Inc., Red Hat
http://www.redhat.com/support/errata/RHSA-2006-0330.html
CVE, Inc., Red Hat
http://www.securityfocus.com/archive/1/434524/100/0/threaded
CVE, Inc., Red Hat
http://www.securityfocus.com/archive/1/436296/100/0/threaded
CVE, Inc., Red Hat
http://www.securityfocus.com/archive/1/436338/100/0/threaded
CVE, Inc., Red Hat
http://www.securityfocus.com/archive/1/438730/100/0/threaded
CVE, Inc., Red Hat
http://www.securityfocus.com/bid/17516
CVE, Inc., Red Hat
Patch
http://www.us-cert.gov/cas/techalerts/TA06-107A.html
CVE, Inc., Red Hat
US Government Resource
http://www.vupen.com/english/advisories/2006/1356
CVE, Inc., Red Hat
https://bugzilla.mozilla.org/show_bug.cgi?id=265736
CVE, Inc., Red Hat
https://exchange.xforce.ibmcloud.com/vulnerabilities/25810
CVE, Inc., Red Hat
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1667
CVE, Inc., Red Hat
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9817
CVE, Inc., Red Hat
https://usn.ubuntu.com/271-1/
CVE, Inc., Red Hat
https://usn.ubuntu.com/275-1/
CVE, Inc., Red Hat
https://usn.ubuntu.com/276-1/
CVE, Inc., Red Hat
Weakness Enumeration
CWE-ID
CWE Name
Source
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
NIST  
Change History
7 change records found show changes
CVE Modified by CVE 11/20/2024 7:09:38 PM
Action
Type
Old Value
New Value
Added
Reference
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt
Added
Reference
ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc
Added
Reference
http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
Added
Reference
http://secunia.com/advisories/19631
Added
Reference
http://secunia.com/advisories/19696
Added
Reference
http://secunia.com/advisories/19714
Added
Reference
http://secunia.com/advisories/19721
Added
Reference
http://secunia.com/advisories/19729
Added
Reference
http://secunia.com/advisories/19746
Added
Reference
http://secunia.com/advisories/19759
Added
Reference
http://secunia.com/advisories/19780
Added
Reference
http://secunia.com/advisories/19794
Added
Reference
http://secunia.com/advisories/19811
Added
Reference
http://secunia.com/advisories/19821
Added
Reference
http://secunia.com/advisories/19823
Added
Reference
http://secunia.com/advisories/19852
Added
Reference
http://secunia.com/advisories/19862
Added
Reference
http://secunia.com/advisories/19863
Added
Reference
http://secunia.com/advisories/19902
Added
Reference
http://secunia.com/advisories/19941
Added
Reference
http://secunia.com/advisories/19950
Added
Reference
http://secunia.com/advisories/20051
Added
Reference
http://secunia.com/advisories/21033
Added
Reference
http://secunia.com/advisories/21622
Added
Reference
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
Added
Reference
http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
Added
Reference
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
Added
Reference
http://www.debian.org/security/2006/dsa-1044
Added
Reference
http://www.debian.org/security/2006/dsa-1046
Added
Reference
http://www.debian.org/security/2006/dsa-1051
Added
Reference
http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml
Added
Reference
http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml
Added
Reference
http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml
Added
Reference
http://www.kb.cert.org/vuls/id/935556
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:075
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:076
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:078
Added
Reference
http://www.mozilla.org/security/announce/2006/mfsa2006-11.html
Added
Reference
http://www.novell.com/linux/security/advisories/2006_04_25.html
Added
Reference
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html
Added
Reference
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html
Added
Reference
http://www.redhat.com/support/errata/RHSA-2006-0328.html
Added
Reference
http://www.redhat.com/support/errata/RHSA-2006-0329.html
Added
Reference
http://www.redhat.com/support/errata/RHSA-2006-0330.html
Added
Reference
http://www.securityfocus.com/archive/1/434524/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/434524/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/436296/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/436338/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/438730/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/438730/100/0/threaded
Added
Reference
http://www.securityfocus.com/bid/17516
Added
Reference
http://www.us-cert.gov/cas/techalerts/TA06-107A.html
Added
Reference
http://www.vupen.com/english/advisories/2006/1356
Added
Reference
https://bugzilla.mozilla.org/show_bug.cgi?id=265736
Added
Reference
https://exchange.xforce.ibmcloud.com/vulnerabilities/25810
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1667
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9817
Added
Reference
https://usn.ubuntu.com/271-1/
Added
Reference
https://usn.ubuntu.com/275-1/
Added
Reference
https://usn.ubuntu.com/276-1/
CVE Modified by Red Hat, Inc. 5/13/2024 9:35:53 PM
Action
Type
Old Value
New Value
CVE Modified by Red Hat, Inc. 10/18/2018 12:35:43 PM
Action
Type
Old Value
New Value
Added
Reference
http://www.securityfocus.com/archive/1/434524/100/0/threaded [No Types Assigned]
Added
Reference
http://www.securityfocus.com/archive/1/436296/100/0/threaded [No Types Assigned]
Added
Reference
http://www.securityfocus.com/archive/1/436338/100/0/threaded [No Types Assigned]
Added
Reference
http://www.securityfocus.com/archive/1/438730/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/434524/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/436296/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/436338/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/438730/100/0/threaded [No Types Assigned]
CVE Modified by Red Hat, Inc. 10/03/2018 5:39:27 PM
Action
Type
Old Value
New Value
Added
Reference
https://usn.ubuntu.com/271-1/ [No Types Assigned]
Added
Reference
https://usn.ubuntu.com/275-1/ [No Types Assigned]
Added
Reference
https://usn.ubuntu.com/276-1/ [No Types Assigned]
Removed
Reference
http://www.ubuntulinux.org/support/documentation/usn/usn-271-1 [No Types Assigned]
Removed
Reference
http://www.ubuntulinux.org/support/documentation/usn/usn-275-1 [No Types Assigned]
Removed
Reference
http://www.ubuntulinux.org/support/documentation/usn/usn-276-1 [No Types Assigned]
CVE Modified by Red Hat, Inc. 10/10/2017 9:30:49 PM
Action
Type
Old Value
New Value
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1667 [No Types Assigned]
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9817 [No Types Assigned]
Removed
Reference
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1667 [Tool Signature, US Government Resource]
Removed
Reference
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9817 [No Types Assigned]
CVE Modified by Red Hat, Inc. 7/19/2017 9:30:52 PM
Action
Type
Old Value
New Value
Added
Reference
https://exchange.xforce.ibmcloud.com/vulnerabilities/25810 [No Types Assigned]
Removed
Reference
http://xforce.iss.net/xforce/xfdb/25810 [No Types Assigned]
Initial CVE Analysis 4/14/2006 11:27:00 AM
Action
Type
Old Value
New Value
Quick Info
CVE Dictionary Entry: CVE-2006-1739 NVD
Published Date: 04/14/2006 NVD
Last Modified: 04/02/2025
Source: Red Hat, Inc.