Unrated severityNVD Advisory· Published Feb 2, 2006· Updated Jun 16, 2026
CVE-2006-0294
CVE-2006-0294
Description
Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
25cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*
- (no CPE)range: < 1.5.0.1
cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*+ 2 more
- cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*
- cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*
- (no CPE)range: < 1.0
cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*
- (no CPE)range: = 1.5 (with JavaScript in mail enabled)
Patches
Vulnerability mechanics
References
12- bugzilla.mozilla.org/show_bug.cginvdPatch
- secunia.com/advisories/18700nvd
- secunia.com/advisories/18704nvd
- secunia.com/advisories/22065nvd
- securitytracker.com/idnvd
- www.mozilla.org/security/announce/2006/mfsa2006-02.htmlnvd
- www.securityfocus.com/archive/1/446657/100/200/threadednvd
- www.securityfocus.com/bid/16476nvd
- www.vupen.com/english/advisories/2006/0413nvd
- www.vupen.com/english/advisories/2006/3749nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24431nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1514nvd
News mentions
0No linked articles in our index yet.