HTTP: Mozilla SVG-XML Integer Overflows

This signature detects attempts to exploit a known vulnerability in Mozzilla. An attacker can create a malicious Web site that contains Web pages with dangerous XML or SVG code, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Multiple Mozilla products are prone to multiple vulnerabilities. These issues include various memory-corruption, code-injection, and access-restriction-bypass vulnerabilities. Other undisclosed issues may have also been addressed in the various updated vendor applications. Successful exploitation of these issues may permit an attacker to execute arbitrary code in the context of the affected application. This may facilitate a compromise of the affected computer; other attacks are also possible.

Affected Products

Mozilla thunderbird

References

BugTraq: 16476

CVE: CVE-2006-0297

Short Name

HTTP:STC:MOZILLA:SVG-XML-INT-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Mozilla SVG-XML Integer Overflows

Extended Description

Affected Products

References

Found a potential security threat?