CVE-2006-2723

Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that contains a large number of nested marquee tags. NOTE: a followup post indicated that the initial report could not be verified.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

3.00% chance of exploitation in the next 30 days, 86th percentile

Published

2006-06-01

Updated

2024-08-07

Proof-of-concept exploits (4)

• http://www.securityfocus.com/archive/1/435411/100/0/threaded
• http://www.securityfocus.com/archive/1/436268/100/0/threaded
• http://www.securityfocus.com/archive/1/435373/100/0/threaded
• http://www.securityfocus.com/archive/1/435882/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1867

References

• CVE Record
• NVD entry

Related

• CVE-2006-2702
• CVE-2006-2725
• CVE-2006-2699
• CVE-2006-2726
• CVE-2006-2697
• CVE-2006-2727