CVE-2006-2777

Name	CVE-2006-2777
Description	Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-1118, DSA-1120, DSA-1134-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
firefox (PTS)	sid	132.0.1-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
firefox	source	(unstable)	1.5.dfsg+1.5.0.4-1	high
mozilla	source	sarge	2:1.7.8-1sarge7.1		DSA-1118
mozilla	source	(unstable)	2:1.7.13-0.3	high
mozilla-firefox	source	sarge	1.0.4-2sarge9		DSA-1120
mozilla-thunderbird	source	sarge	1.0.2-2.sarge1.0.8a		DSA-1134-1
xulrunner	source	(unstable)	1.8.0.4-1	high

MFSA-2006-43