Description
Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.
References
- 21668 vdb-entry
- MDKSA-2007:010 vendor-advisory
- 23672 third-party-advisory
- ADV-2006-5068 vdb-entry
- 23598 third-party-advisory
- 23692 third-party-advisory
- GLSA-200701-04 vendor-advisory
- 23282 third-party-advisory
- 23422 third-party-advisory
- HPSBUX02153 vendor-advisory
- 1017400 vdb-entry
- 23614 third-party-advisory
- ADV-2008-0083 vdb-entry
- 23420 third-party-advisory
- 1017401 vdb-entry
- SUSE-SA:2006:080 vendor-advisory
- 23545 third-party-advisory
- 1017399 vdb-entry
- GLSA-200701-03 vendor-advisory
- TA06-354A third-party-advisory
- VU#722244 third-party-advisory
- SUSE-SA:2007:006 vendor-advisory
- http://www.mozilla.org/security/announce/2006/mfsa2006-69.html
- MDKSA-2007:011 vendor-advisory
- GLSA-200701-02 vendor-advisory