Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a large number of values in the cols (aka columns) attribute, leading to a heap-based buffer overflow.
Vector
NETWORK
Complexity
MEDIUM
Authentication
NONE
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Mozilla SeaMonkey 2.0 Alpha 3
Mozilla Thunderbird 0.1
Mozilla SeaMonkey 2.0 Alpha 2
Mozilla Firefox 3.5.3
Mozilla SeaMonkey 1.0.6
Mozilla SeaMonkey 1.0.5
Mozilla SeaMonkey 1.0.2
Mozilla SeaMonkey 1.0.1
Mozilla SeaMonkey 1.0 alpha
Mozilla SeaMonkey 1.1 alpha
Mozilla SeaMonkey 1.0.9
Mozilla SeaMonkey 1.0.4
Mozilla SeaMonkey 1.0.3
Mozilla SeaMonkey 1.0.8
Mozilla SeaMonkey 1.0.7
Mozilla SeaMonkey 2.0.6
Mozilla Thunderbird 1.5
Mozilla SeaMonkey 2.0.3
Mozilla SeaMonkey 2.0.2
Mozilla SeaMonkey 2.0.1
Mozilla Firefox 3.0.4
Mozilla Firefox 3.0.13
Mozilla Firefox 3.0.1
Mozilla Firefox 3.0.10
Mozilla Firefox 3.0.3
Mozilla Firefox 3.0.12
Mozilla Firefox 3.0.6
Mozilla Firefox 3.0.15
Mozilla SeaMonkey 2.0.5
Mozilla SeaMonkey 2.0.4
Mozilla Firefox 1.5.0.6
Mozilla Firefox 3.0.8
Mozilla Firefox 3.0.17
Mozilla Firefox 3.0.5
Mozilla Firefox 3.0.14
Mozilla Thunderbird 1.0
Mozilla Firefox 1.5.0.4
Mozilla Firefox 3.0.2
Mozilla Firefox 3.0.11
Mozilla Firefox 1.5.0.7
Mozilla Firefox 3.0.7
Mozilla Firefox 3.0.16
Mozilla Firefox 1.5 Beta 1
Mozilla Firefox 1.5 Beta 2
Mozilla Firefox 2.0.0.10
Mozilla Firefox 3.0
Mozilla Firefox 1.5.0.2
Mozilla Firefox 3.0.9
Mozilla SeaMonkey 2.0 RC2
Mozilla Firefox 1.5.0.3
Mozilla Firefox 1.5.0.1
Mozilla SeaMonkey 2.0 RC1
Mozilla Firefox 2.0.0.13
Mozilla Firefox 3.5
Mozilla Firefox 2.0.0.11
Mozilla Firefox 2.0.0.14
Mozilla Firefox 3.6
Mozilla Firefox 2.0.0.17
Mozilla Firefox 2.0.0.12
Mozilla Firefox 2.0.0.15
Mozilla Firefox 2.0.0.18
Mozilla Firefox 2.0.0.16
Mozilla Firefox 1.5.0.12
Mozilla Firefox 2.0.0.20
Mozilla Thunderbird 2.0.0.18
Mozilla Thunderbird 2.0.0.17
Mozilla Thunderbird 2.0.0.12
Mozilla Thunderbird 2.0.0.14
Mozilla Firefox 1.5.0.11
Mozilla Firefox 2.0.0.19
Mozilla Thunderbird 2.0.0.5
Mozilla Thunderbird 2.0.0.4
Mozilla Thunderbird 2.0.0.7
Mozilla Thunderbird 2.0.0.6
Mozilla Thunderbird 2.0.0.1
Mozilla Thunderbird 2.0.0.0
Mozilla Thunderbird 2.0.0.3
Mozilla Thunderbird 2.0.0.2
Mozilla SeaMonkey 1.1.17
Mozilla Seamonkey 1.1.18
Mozilla Seamonkey 1.1.19
Mozilla Firefox 1.5.0.10
Mozilla Thunderbird 2.0.0.16
Mozilla Thunderbird 1.5.0.10
Mozilla Firefox 1.5.0.5
Mozilla Firefox 1.5.0.8
Mozilla Thunderbird 3.0.6
Mozilla Thunderbird 1.5.0.14
Mozilla Firefox 1.5.0.9
Mozilla Thunderbird 1.5.0.11
Mozilla Thunderbird 1.5.0.13
Mozilla Thunderbird 1.5.0.12
Mozilla Thunderbird 1.5.0.1
Mozilla Thunderbird 1.5.0.3
Mozilla Thunderbird 1.5.0.2
Mozilla Thunderbird 3.0.1
Mozilla Thunderbird 3.0.4
Mozilla Firefox 1.5.7
Mozilla Thunderbird 3.0.3
Mozilla Thunderbird 3.0.5
Mozilla Thunderbird 3.0.2
Mozilla Firefox 2.0.0.2
Mozilla Firefox 1.5.6
Mozilla Firefox 1.5.8
Mozilla Firefox 2.0.0.3
Mozilla Firefox 2.0.0.6
Mozilla Firefox 2.0.0.1
Mozilla Firefox 2.0.0.4
Mozilla SeaMonkey 1.1.13
Mozilla Firefox 2.0.0.7
Mozilla SeaMonkey 1.1.14
Mozilla Thunderbird 2.0.0.19
Mozilla SeaMonkey 1.1.15
Mozilla Firefox 2.0.0.5
Mozilla SeaMonkey 1.1.16
Mozilla SeaMonkey 1.1.10
Mozilla SeaMonkey 1.1.11
Mozilla Firefox 1.0 Preview Release
Mozilla SeaMonkey 1.1.12
Mozilla Thunderbird 2.0.0.23
Mozilla Thunderbird 2.0.0.22
Mozilla Seamonkey 1.1.4
Mozilla Seamonkey 1.1.5
Mozilla SeaMonkey 2.0 Beta 2
Mozilla SeaMonkey 2.0 Beta 1
Mozilla Seamonkey 1.1.1
Mozilla Firefox 1.5
Mozilla Thunderbird 1.5.0.9
Mozilla Thunderbird 1.5.0.8
Mozilla SeaMonkey 1.1.8
Mozilla Thunderbird 2.0.0.21
Mozilla SeaMonkey 1.1.9
Mozilla Seamonkey 1.1.2
Mozilla Thunderbird 1.5.0.5
Mozilla Seamonkey 1.1.3
Mozilla Thunderbird 1.5.0.4
Mozilla Thunderbird 1.5.0.7
Mozilla Thunderbird 1.5.0.6
Mozilla Seamonkey 1.1.6
Mozilla Firefox 1.0
Mozilla Seamonkey 1.1.7
Mozilla SeaMonkey 1.1 beta
Mozilla Firefox 3.5.6
Mozilla Thunderbird 0.7.3
Mozilla Firefox 3.5.4
Mozilla Thunderbird 0.7.1
Mozilla Firefox 3.5.7
Mozilla Thunderbird 0.7.2
Mozilla SeaMonkey 1.0 beta
Mozilla SeaMonkey 2.0
Mozilla Firefox 3.5.9
Mozilla Firefox 3.5.5
Mozilla Firefox 3.5.8
Mozilla Thunderbird 1.5.2
Mozilla Thunderbird 2.0.0.9
Mozilla Thunderbird 2.0.0.8
Mozilla Thunderbird 1.5.1
Mozilla SeaMonkey 1.5.0.8
Mozilla SeaMonkey 1.5.0.9
Mozilla Seamonkey 2.0a1pre (not an official CPE)
Mozilla Thunderbird 3.1.2
Mozilla Thunderbird 3.1.1
Mozilla Firefox 3.5.2
Mozilla SeaMonkey 2.0 Alpha 1
Mozilla Thunderbird 0.4
Mozilla Thunderbird 0.5
Mozilla Firefox 3.5.1
Mozilla Thunderbird 0.2
Mozilla Thunderbird 0.3
Mozilla Firefox 3.6.7
Mozilla Firefox 3.6.4
Mozilla Firefox 3.6.8
Mozilla Thunderbird 0.8
Mozilla Thunderbird 0.9
Mozilla Thunderbird 0.6
Mozilla Thunderbird 0.7
Mozilla SeaMonkey 1.1
Mozilla Firefox 2.0.0.8
Mozilla Thunderbird 1.5 Beta 2
Mozilla Firefox 1.5.1
Mozilla Firefox 1.5.3
Mozilla SeaMonkey 1.0
Mozilla Firefox 1.5.4
Mozilla Firefox 1.5.2
Mozilla Firefox 1.5.5
Mozilla Firefox 3.6.6
Mozilla Firefox 3.6.3
Mozilla Firefox 3.6.2
Mozilla Thunderbird 3.1
Mozilla Thunderbird 3.0
Mozilla SeaMonkey 1.5.0.10
Mozilla Firefox 1.0.5
Mozilla Firefox 1.0.3
Mozilla Firefox 1.0.6
Mozilla Firefox 1.0.8
Mozilla Firefox 3.5.10
Mozilla Firefox 1.0.4
Mozilla Firefox 1.0.7
Mozilla Firefox 1.0.1
Mozilla Firefox 3.5.11
Mozilla Firefox 1.0.2
Mozilla Firefox 2.0
Mozilla Thunderbird 1.0.5
Mozilla Thunderbird 1.0.6
Mozilla Thunderbird 1.0.3
Mozilla Thunderbird 1.0.4
Mozilla Thunderbird 2.0
Mozilla Thunderbird 1.0.7
Mozilla Thunderbird 1.0.8
Mozilla Thunderbird 1.0.1
Mozilla Thunderbird 1.0.2
Mozilla Firefox 2.0.0.9