CVE-2006-6504 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2006-6504 Interim 1 5 2023-12-09T02:16:29Z current 2021-05-30T12:37:20Z 2023-12-09T02:16:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2006-6504 Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKRQNKR7TLOOCS5DB6ZRNQKL4JUYVOMW/#AKRQNKR7TLOOCS5DB6ZRNQKL4JUYVOMW E-Mail link for SUSE-SA:2006:080 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DIRPHXRTWZKIKN4XN2NQYQOU6XCHVB6D/#DIRPHXRTWZKIKN4XN2NQYQOU6XCHVB6D E-Mail link for SUSE-SA:2007:006 https://www.suse.com/support/security/rating/ SUSE Security Ratings Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption. CVE-2006-6504 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C