Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox   E-mail this CVE-2006-0748 to a friend New vulnerability? New tool? Tell us	CVE-2006-0748 Gecko Table Rebuilding Code Execution     Credit: The information has been provided by zdi-disclosures. The original article can be found at: http://www.zerodayinitiative.com/advisories/ZDI-06-011.html Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    CVE-2006-0748 Details Check for CVE-2006-0748 Vulnerability Assessment and Management. Automated Pen Testing for 50 to 50,000 nodes beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * Firefox version 1.5 and above  * Firefox version 1.5.0.1 and prior  * Firefox version 1.0 and above  * Firefox version 1.0.7 and prior  * Thunderbird version 1.5 and above  * Thunderbird version 1.5.0.1 and prior  * Thunderbird version 1.0 and above  * Thunderbird version 1.0.7 and prior  * SeaMonkey version 1.0  * Mozilla Suite version 1.7 and above  * Mozilla Suite version 1.7.12 and prior The specific flaw exists within the routine RebuildConsideringRows() during the rebuilding of nonsensical table tags. When the Mozilla engine attempts to fix the malformed table, an attacker is capable of triggering a memory corruption that can lead to code execution from user-supplied data. The vulnerability allow attackers to execute arbitrary code on vulnerable installations of the Mozilla/Firefox web browser and Thunderbird e-mail client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious e-mail. CVE Information: CVE-2006-0748 Disclosure Timeline: 2006.02.28 - Vulnerability reported to vendor 2006.04.25 - Public release of advisory  Comments on CVE-2006-0748:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®