CVE-2006-0292: mozilla firefox

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2006-0292

Published 02-02-2006Last modified 07-08-2024

Some data may be incomplete

2 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2006-0292 is a high (CVSS 7.5) vulnerability in mozilla firefox. EPSS estimates a 4.58% chance of exploitation in the next 30 days, higher than 91.5% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

4.58%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5

DSA-1044-1 DSA-1046-1 DSA-1051-1 RHSA-2006:0200 RHSA-2006:0330

Timeline

02-02-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

4.58%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.58% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla2 products

firefox0.8 | 0.9 | 0.9:rc | 0.9.1 | 0.9.2 | 0.9.3 | 0.10 | 0.10.1 | 1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.5 | 1.5:beta1
mozilla1.4 | 1.4.1 | 1.5 | 1.5:alpha | 1.5:rc1 | 1.5:rc2

Debian1 product

thunderbird< 1.5.0.2-1

2 vendors · 3 products

References

59 links

www.mandriva.com/security/advisories?name=MDKSA-2006:036Vendor AdvisoryX Refsource MANDRIVA
usn.ubuntu.com/275-1/Vendor AdvisoryX Refsource UBUNTU
www.redhat.com/support/errata/RHSA-2006-0330.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/19902Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/24430VDB EntryX Refsource XF
www.mandriva.com/security/advisories?name=MDKSA-2006:037Vendor AdvisoryX Refsource MANDRIVA
usn.ubuntu.com/276-1/Vendor AdvisoryX Refsource UBUNTU
www.securityfocus.com/archive/1/438730/100/0/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/19941Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19780Third Party AdvisoryX Refsource SECUNIA

Show all 59 references

bugzilla.mozilla.org/show_bug.cgi?id=316885X Refsource CONFIRMPatch
secunia.com/advisories/19821Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10016VDB EntrySignatureX Refsource OVAL
www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.htmlVendor AdvisoryX Refsource FEDORA
www.gentoo.org/security/en/glsa/glsa-200604-12.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/21622Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19862Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19230Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18704Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2006-205.htmX Refsource CONFIRM
secunia.com/advisories/19823Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2006/dsa-1051Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18709Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/3749VDB EntryX Refsource VUPEN
usn.ubuntu.com/271-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/18705Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200604-18.xmlVendor AdvisoryX Refsource GENTOO
www.securityfocus.com/bid/16476VDB EntryX Refsource BID
www.vupen.com/english/advisories/2006/0413VDB EntryX Refsource VUPEN
securitytracker.com/id?1015570VDB EntryX Refsource SECTRACK
secunia.com/advisories/19746Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21033Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18700Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/19759Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/446657/100/200/threadedVendor AdvisoryX Refsource HP
www.redhat.com/support/errata/RHSA-2006-0200.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A670VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/18706Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.htmlVendor AdvisoryX Refsource FEDORA
www.mandriva.com/security/advisories?name=MDKSA-2006:078Vendor AdvisoryX Refsource MANDRIVA
www.redhat.com/support/errata/RHSA-2006-0199.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/20051Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19863Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/425978/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.mozilla.org/security/announce/2006/mfsa2006-01.htmlX Refsource CONFIRM
secunia.com/advisories/18708Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/425975/100/0/threadedVendor AdvisoryX Refsource FEDORA
sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/19852Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_04_25.htmlVendor AdvisoryX Refsource SUSE
www.gentoo.org/security/en/glsa/glsa-200605-09.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2006/3391VDB EntryX Refsource VUPEN
secunia.com/advisories/18703Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/22065Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19950Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2006/dsa-1046Vendor AdvisoryX Refsource DEBIAN
www.debian.org/security/2006/dsa-1044Vendor AdvisoryX Refsource DEBIAN
security-tracker.debian.org/tracker/CVE-2006-0292Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities