CVE-2006-0749

nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.

• CWE-399

• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txtThird Party Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.ascBroken Link
• http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.htmlBroken Link
• http://secunia.com/advisories/19631Third Party Advisory
• http://secunia.com/advisories/19696Third Party Advisory
• http://secunia.com/advisories/19714Third Party Advisory
• http://secunia.com/advisories/19721Third Party Advisory
• http://secunia.com/advisories/19729Third Party Advisory
• http://secunia.com/advisories/19746Third Party Advisory
• http://secunia.com/advisories/19759Third Party Advisory
• http://secunia.com/advisories/19780Third Party Advisory
• http://secunia.com/advisories/19794Third Party Advisory
• http://secunia.com/advisories/19811Third Party Advisory
• http://secunia.com/advisories/19821Third Party Advisory
• http://secunia.com/advisories/19823Third Party Advisory
• http://secunia.com/advisories/19852Third Party Advisory
• http://secunia.com/advisories/19862Third Party Advisory
• http://secunia.com/advisories/19863Third Party Advisory
• http://secunia.com/advisories/19902Third Party Advisory
• http://secunia.com/advisories/19941Third Party Advisory
• http://secunia.com/advisories/19950Third Party Advisory
• http://secunia.com/advisories/20051Third Party Advisory
• http://secunia.com/advisories/21033Third Party Advisory
• http://secunia.com/advisories/21622Third Party Advisory
• http://securityreason.com/securityalert/729Third Party Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1Broken Link
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1Broken Link
• http://support.avaya.com/elmodocs2/security/ASA-2006-205.htmThird Party Advisory
• http://www.debian.org/security/2006/dsa-1044Third Party Advisory
• http://www.debian.org/security/2006/dsa-1046Third Party Advisory
• http://www.debian.org/security/2006/dsa-1051Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200604-12.xmlThird Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200604-18.xmlThird Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200605-09.xmlThird Party Advisory
• http://www.kb.cert.org/vuls/id/736934Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:075Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:076Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:078Third Party Advisory
• http://www.mozilla.org/security/announce/2006/mfsa2006-18.htmlVendor Advisory
• http://www.novell.com/linux/security/advisories/2006_04_25.htmlBroken Link
• http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.htmlThird Party Advisory
• http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2006-0328.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2006-0329.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2006-0330.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/431126/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/434524/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/436296/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/436338/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/438730/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/17516Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA06-107A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2006/1356Permissions Required, Third Party Advisory
• http://www.vupen.com/english/advisories/2006/3391Permissions Required, Third Party Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-06-009.htmlThird Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25819Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848Third Party Advisory
• https://usn.ubuntu.com/271-1/Broken Link
• https://usn.ubuntu.com/275-1/Broken Link
• https://usn.ubuntu.com/276-1/Broken Link
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txtThird Party Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.ascBroken Link
• http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.htmlBroken Link
• http://secunia.com/advisories/19631Third Party Advisory
• http://secunia.com/advisories/19696Third Party Advisory
• http://secunia.com/advisories/19714Third Party Advisory
• http://secunia.com/advisories/19721Third Party Advisory
• http://secunia.com/advisories/19729Third Party Advisory
• http://secunia.com/advisories/19746Third Party Advisory
• http://secunia.com/advisories/19759Third Party Advisory
• http://secunia.com/advisories/19780Third Party Advisory
• http://secunia.com/advisories/19794Third Party Advisory
• http://secunia.com/advisories/19811Third Party Advisory
• http://secunia.com/advisories/19821Third Party Advisory
• http://secunia.com/advisories/19823Third Party Advisory
• http://secunia.com/advisories/19852Third Party Advisory
• http://secunia.com/advisories/19862Third Party Advisory
• http://secunia.com/advisories/19863Third Party Advisory
• http://secunia.com/advisories/19902Third Party Advisory
• http://secunia.com/advisories/19941Third Party Advisory
• http://secunia.com/advisories/19950Third Party Advisory
• http://secunia.com/advisories/20051Third Party Advisory
• http://secunia.com/advisories/21033Third Party Advisory
• http://secunia.com/advisories/21622Third Party Advisory
• http://securityreason.com/securityalert/729Third Party Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1Broken Link
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1Broken Link
• http://support.avaya.com/elmodocs2/security/ASA-2006-205.htmThird Party Advisory
• http://www.debian.org/security/2006/dsa-1044Third Party Advisory
• http://www.debian.org/security/2006/dsa-1046Third Party Advisory
• http://www.debian.org/security/2006/dsa-1051Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200604-12.xmlThird Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200604-18.xmlThird Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200605-09.xmlThird Party Advisory
• http://www.kb.cert.org/vuls/id/736934Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:075Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:076Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:078Third Party Advisory
• http://www.mozilla.org/security/announce/2006/mfsa2006-18.htmlVendor Advisory
• http://www.novell.com/linux/security/advisories/2006_04_25.htmlBroken Link
• http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.htmlThird Party Advisory
• http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2006-0328.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2006-0329.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2006-0330.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/431126/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/434524/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/436296/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/436338/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/438730/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/17516Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA06-107A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2006/1356Permissions Required, Third Party Advisory
• http://www.vupen.com/english/advisories/2006/3391Permissions Required, Third Party Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-06-009.htmlThird Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25819Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848Third Party Advisory
• https://usn.ubuntu.com/271-1/Broken Link
• https://usn.ubuntu.com/275-1/Broken Link
• https://usn.ubuntu.com/276-1/Broken Link

Published

Apr 14, 2006

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0743Format string vulnerability in LocalSyslogAppender in Apache…
• CVE-2006-0744Linux kernel before 2.6.16.5 does not properly handle uncano…
• CVE-2006-0745X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X…
• CVE-2006-0746Certain patches for kpdf do not include all relevant patches…
• CVE-2006-0747Integer underflow in Freetype before 2.2 allows remote attac…
• CVE-2006-0748Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x…
• CVE-2006-0750SQL injection vulnerability in army.php in supersmashbrother…
• CVE-2006-0751Multiple unspecified vulnerabilities in the (1) Filesystem i…
• CVE-2006-0752Niels Provos Honeyd before 1.5 replies to certain illegal IP…
• CVE-2006-0753Memory leak in Microsoft Internet Explorer 6 for Windows XP …
• CVE-2006-0754dotProject 2.0.1 and earlier allows remote attackers to obta…
• CVE-2006-0755Multiple PHP remote file include vulnerabilities in dotProje…5.6