CVE-2006-0749: mozilla firefox Resource Management Errors

CVSS: 9.3v2.0HighAnalyzed

AliasesDEBIAN-CVE-2006-0749

Published 14-04-2006Last modified 07-08-2024

Some data may be incomplete

2 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2006-0749 is a high (CVSS 9.3) Resource Management Errors vulnerability in mozilla firefox. EPSS estimates a 10.49% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

10.49%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

DSA-1044-1 DSA-1046-1 DSA-1051-1 RHSA-2006:0328 RHSA-2006:0329 RHSA-2006:0330

Timeline

14-04-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

10.49%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.49% on 19-09-2026

19-09-202619-10-2026

EPSS score

10.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.

Affected systems

Mozilla4 products

firefox≥ 1.0, < 1.5
mozilla_suite< 1.7.13
seamonkey< 1.0
thunderbird≥ 1.0, < 1.0.8

Debian1 product

thunderbird< 1.5.0.2-1

2 vendors · 5 products

References

60 links

www.mozilla.org/security/announce/2006/mfsa2006-18.htmlX Refsource CONFIRMVendor Advisory
usn.ubuntu.com/275-1/Vendor AdvisoryX Refsource UBUNTUBroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704VDB EntrySignatureX Refsource OVALThird Party Advisory
www.redhat.com/support/errata/RHSA-2006-0330.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/archive/1/434524/100/0/threadedVendor AdvisoryX Refsource HPBroken Link
secunia.com/advisories/19902Third Party AdvisoryX Refsource SECUNIA
usn.ubuntu.com/276-1/Vendor AdvisoryX Refsource UBUNTUBroken Link
www.securityfocus.com/archive/1/438730/100/0/threadedVendor AdvisoryX Refsource HPBroken Link
secunia.com/advisories/19941Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19780Third Party AdvisoryX Refsource SECUNIA

Show all 60 references

www.redhat.com/support/errata/RHSA-2006-0328.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/19821Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200604-12.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/21622Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19862Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:075Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
support.avaya.com/elmodocs2/security/ASA-2006-205.htmX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/19823Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2006/dsa-1051Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
usn.ubuntu.com/271-1/Vendor AdvisoryX Refsource UBUNTUBroken Link
secunia.com/advisories/19714Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0329.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200604-18.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/19811Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19794Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19746Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21033Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/19696Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/431126/100/0/threadedMailing ListX Refsource BUGTRAQBroken Link
secunia.com/advisories/19759Third Party AdvisoryX Refsource SECUNIA
lists.suse.com/archive/suse-security-announce/2006-Apr/0003.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.securityfocus.com/archive/1/436338/100/0/threadedVendor AdvisoryX Refsource FEDORABroken Link
www.vupen.com/english/advisories/2006/1356VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/25819VDB EntryX Refsource XFThird Party Advisory
www.kb.cert.org/vuls/id/736934Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.mandriva.com/security/advisories?name=MDKSA-2006:078Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/19729Third Party AdvisoryX Refsource SECUNIA
securityreason.com/securityalert/729Third Party AdvisoryX Refsource SREASON
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/20051Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19863Third Party AdvisoryX Refsource SECUNIA
www.us-cert.gov/cas/techalerts/TA06-107A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.securityfocus.com/archive/1/436296/100/0/threadedVendor AdvisoryX Refsource FEDORABroken Link
www.securityfocus.com/bid/17516VDB EntryX Refsource BIDThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
secunia.com/advisories/19852Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19721Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_04_25.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.gentoo.org/security/en/glsa/glsa-200605-09.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.vupen.com/english/advisories/2006/3391VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
secunia.com/advisories/19631Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19950Third Party AdvisoryX Refsource SECUNIA
www.zerodayinitiative.com/advisories/ZDI-06-009.htmlX Refsource MISCThird Party AdvisoryVDB Entry
www.mandriva.com/security/advisories?name=MDKSA-2006:076Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.debian.org/security/2006/dsa-1046Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.debian.org/security/2006/dsa-1044Vendor AdvisoryX Refsource DEBIANThird Party Advisory
security-tracker.debian.org/tracker/CVE-2006-0749Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities