Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.
Vector
NETWORK
Complexity
MEDIUM
Authentication
NONE
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Mozilla Thunderbird 2.0.0.0
Mozilla SeaMonkey 1.1.17
Mozilla Seamonkey 1.1.18
Mozilla Thunderbird 1.0.7
Mozilla Seamonkey 1.1.19
Mozilla Thunderbird 1.0.6
Mozilla Thunderbird 1.0.5
Mozilla Thunderbird 2.0.0.16
Mozilla Thunderbird 1.5.0.10
Mozilla Thunderbird 1.5.0.14
Mozilla Thunderbird 1.5.0.13
Mozilla Thunderbird 1.5.0.12
Mozilla Thunderbird 1.5.0.2
Mozilla Thunderbird 3.0.1
Mozilla Thunderbird 3.0.4
Mozilla Thunderbird 3.0.3
Mozilla Thunderbird 3.0.2
Mozilla SeaMonkey 1.1.13
Mozilla SeaMonkey 1.1.14
Mozilla SeaMonkey 1.1.15
Mozilla Thunderbird 2.0.0.19
Mozilla SeaMonkey 1.1.16
Mozilla SeaMonkey 1.1.10
Mozilla SeaMonkey 1.1.11
Mozilla SeaMonkey 1.1.12
Mozilla Thunderbird 3.0
Mozilla Seamonkey 1.1.4
Mozilla Firefox 3.6.2
Mozilla Seamonkey 1.1.5
Mozilla Firefox 3.6.3
Mozilla SeaMonkey 2.0 Beta 2
Mozilla SeaMonkey 2.0 Beta 1
Mozilla Seamonkey 1.1.1
Mozilla SeaMonkey 1.0
Mozilla Thunderbird 1.5.0.9
Mozilla Thunderbird 1.5.0.8
Mozilla SeaMonkey 1.1.8
Mozilla SeaMonkey 1.1.9
Mozilla Seamonkey 1.1.2
Mozilla Seamonkey 1.1.3
Mozilla Thunderbird 1.5.0.5
Mozilla Thunderbird 1.5.0.4
Mozilla SeaMonkey 1.1
Mozilla Thunderbird 1.5.0.7
Mozilla Seamonkey 1.1.6
Mozilla Thunderbird 0.7
Mozilla Seamonkey 1.1.7
Mozilla Thunderbird 0.6
Mozilla Thunderbird 0.9
Mozilla Thunderbird 0.8
Mozilla SeaMonkey 1.1 beta
Mozilla Thunderbird 0.3
Mozilla Thunderbird 0.2
Mozilla Thunderbird 0.5
Mozilla Firefox 3.5.1
Mozilla Thunderbird 0.4
Mozilla SeaMonkey 2.0 Alpha 1
Mozilla SeaMonkey 2.0 Alpha 3
Mozilla Firefox 3.5.2
Mozilla Thunderbird 0.1
Mozilla SeaMonkey 2.0 Alpha 2
Mozilla Firefox 3.5.3
Mozilla SeaMonkey 1.0.6
Mozilla SeaMonkey 1.0.5
Mozilla Firefox 3.5.4
Mozilla Firefox 3.5.6
Mozilla Firefox 3.5.7
Mozilla SeaMonkey 1.0.2
Mozilla SeaMonkey 1.0.1
Mozilla SeaMonkey 1.0 alpha
Mozilla SeaMonkey 1.0 beta
Mozilla SeaMonkey 1.1 alpha
Mozilla SeaMonkey 1.0.9
Mozilla SeaMonkey 1.0.4
Mozilla SeaMonkey 1.0.3
Mozilla SeaMonkey 1.0.8
Mozilla SeaMonkey 2.0
Mozilla SeaMonkey 1.0.7
Mozilla Thunderbird 1.5
Mozilla SeaMonkey 2.0.3
Mozilla SeaMonkey 2.0.2
Mozilla SeaMonkey 2.0.1
Mozilla Firefox 3.5.9
Mozilla Firefox 3.5.5
Mozilla Thunderbird 2.0.0.9
Mozilla SeaMonkey 2.0.4
Mozilla Thunderbird 1.0
Mozilla SeaMonkey 2.0 RC2
Mozilla SeaMonkey 2.0 RC1
Mozilla Firefox 3.5
Mozilla Firefox 3.6
Mozilla Thunderbird 2.0.0.6
Mozilla Thunderbird 2.0.0.4
Mozilla Thunderbird 2.0.0.5
Mozilla Thunderbird 1.0.8
Mozilla Thunderbird 2.0.0.14
Mozilla Thunderbird 2.0.0.12
Mozilla Thunderbird 2.0.0.17
Mozilla Thunderbird 2.0.0.18
Mozilla Thunderbird 1.0.2