{"schemaVersion":3,"id":"CVE-2006-0748","aliases":["DEBIAN-CVE-2006-0748"],"status":"published","duplicateOf":null,"title":null,"description":"Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via \"an invalid and non-sensical ordering of table-related tags\" that results in a negative array index.","dates":{"published":"2006-04-14T10:00:00.000Z","modified":"2024-08-07T16:48:55.957Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.07968,"percentile":0.94701,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.18200000000000022,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.07786},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.07968,"percentile":0.94701}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.07786,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.07968,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.07968,"percentile":0.94701}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-399","name":"Resource Management Errors","description":"Weaknesses in this category are related to improper management of system resources.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/399.html"}],"affected":[{"vendor":"debian","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/thunderbird","purlType":"deb","versions":[{"text":"< 1.5.0.2-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0.2-1","eol":null,"hubHref":null},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.0.4","noFixRecorded":false,"fixedIn":null},{"text":"1.0.5","noFixRecorded":false,"fixedIn":null},{"text":"1.0.6","noFixRecorded":false,"fixedIn":null},{"text":"1.0.7","noFixRecorded":false,"fixedIn":null},{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5:beta1","noFixRecorded":false,"fixedIn":null},{"text":"1.5:beta2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.1","noFixRecorded":false,"fixedIn":null},{"text":"preview_release","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.5 | 1.5:beta1 | 1.5:beta2 | 1.5.0.1 | preview_release","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0:beta","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.0:beta","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.0.4","noFixRecorded":false,"fixedIn":null},{"text":"1.0.5","noFixRecorded":false,"fixedIn":null},{"text":"1.0.5:beta","noFixRecorded":false,"fixedIn":null},{"text":"1.0.6","noFixRecorded":false,"fixedIn":null},{"text":"1.0.7","noFixRecorded":false,"fixedIn":null},{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5:beta2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.5:beta | 1.0.6 | 1.0.7 | 1.5 | 1.5:beta2 | 1.5.0.1","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-27.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-27.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM"]},{"url":"https://usn.ubuntu.com/275-1/","label":"usn.ubuntu.com/275-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.vupen.com/english/advisories/2006/3748","label":"www.vupen.com/english/advisories/2006/3748","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0330.html","label":"www.redhat.com/support/errata/RHSA-2006-0330.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/19902","label":"secunia.com/advisories/19902","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/432103/100/0/threaded","label":"www.securityfocus.com/archive/1/432103/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"https://usn.ubuntu.com/276-1/","label":"usn.ubuntu.com/276-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.securityfocus.com/archive/1/438730/100/0/threaded","label":"www.securityfocus.com/archive/1/438730/100/0/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://secunia.com/advisories/19941","label":"secunia.com/advisories/19941","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19821","label":"secunia.com/advisories/19821","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml","label":"www.gentoo.org/security/en/glsa/glsa-200604-12.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11164","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11164","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/21622","label":"secunia.com/advisories/21622","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19862","label":"secunia.com/advisories/19862","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:075","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:075","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm","label":"support.avaya.com/elmodocs2/security/ASA-2006-205.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/19823","label":"secunia.com/advisories/19823","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2006/dsa-1051","label":"www.debian.org/security/2006/dsa-1051","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-011/","label":"www.zerodayinitiative.com/advisories/ZDI-06-011/","hostname":"www.zerodayinitiative.com","tags":["X Refsource MISC"]},{"url":"http://www.vupen.com/english/advisories/2006/3749","label":"www.vupen.com/english/advisories/2006/3749","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0329.html","label":"www.redhat.com/support/errata/RHSA-2006-0329.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml","label":"www.gentoo.org/security/en/glsa/glsa-200604-18.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/19811","label":"secunia.com/advisories/19811","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19794","label":"secunia.com/advisories/19794","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21033","label":"secunia.com/advisories/21033","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://secunia.com/advisories/19759","label":"secunia.com/advisories/19759","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/436338/100/0/threaded","label":"www.securityfocus.com/archive/1/436338/100/0/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25985","label":"exchange.xforce.ibmcloud.com/vulnerabilities/25985","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","label":"www.securityfocus.com/archive/1/446658/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://www.vupen.com/english/advisories/2006/1356","label":"www.vupen.com/english/advisories/2006/1356","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","label":"www.securityfocus.com/archive/1/446657/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:078","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:078","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1189","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1189","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/20051","label":"secunia.com/advisories/20051","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19863","label":"secunia.com/advisories/19863","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/436296/100/0/threaded","label":"www.securityfocus.com/archive/1/436296/100/0/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://www.securityfocus.com/bid/17516","label":"www.securityfocus.com/bid/17516","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://secunia.com/advisories/19852","label":"secunia.com/advisories/19852","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/22066","label":"secunia.com/advisories/22066","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","label":"www.novell.com/linux/security/advisories/2006_04_25.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml","label":"www.gentoo.org/security/en/glsa/glsa-200605-09.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.vupen.com/english/advisories/2006/3391","label":"www.vupen.com/english/advisories/2006/3391","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/22065","label":"secunia.com/advisories/22065","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19950","label":"secunia.com/advisories/19950","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:076","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:076","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.debian.org/security/2006/dsa-1046","label":"www.debian.org/security/2006/dsa-1046","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.debian.org/security/2006/dsa-1044","label":"www.debian.org/security/2006/dsa-1044","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-0748","label":"security-tracker.debian.org/tracker/CVE-2006-0748","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1044-1","DSA-1046-1","DSA-1051-1","RHSA-2006:0328","RHSA-2006:0329","RHSA-2006:0330"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-04-14T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T16:48:55.957Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T09:10:12.575Z","stale":false,"partial":false}}