CVE-2006-1730: mozilla firefox Numeric Errors

CVSS: 9.3v2.0HighModified

AliasesDEBIAN-CVE-2006-1730

Published 14-04-2006Last modified 07-08-2024

Some data may be incomplete

2 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2006-1730 is a high (CVSS 9.3) Numeric Errors vulnerability in mozilla firefox. EPSS estimates a 10.34% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

10.34%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

DSA-1044-1 DSA-1046-1 DSA-1051-1 RHSA-2006:0328 RHSA-2006:0329 RHSA-2006:0330

Timeline

14-04-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

10.34%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.34% on 19-09-2026

19-09-202619-10-2026

EPSS score

10.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Mozilla4 products

firefox1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.5 | 1.5:beta1 | 1.5:beta2 | 1.5.0.1
mozilla_suite1.7.6 | 1.7.7 | 1.7.8 | 1.7.10 | 1.7.11 | 1.7.12
seamonkey1.0 | 1.0:beta
thunderbird1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.5:beta | 1.0.6 | 1.0.7 | 1.5 | 1.5:beta2 | 1.5.0.1

Debian1 product

thunderbird< 1.5.0.2-1

2 vendors · 5 products

References

72 links

www.mozilla.org/security/announce/2006/mfsa2006-22.htmlX Refsource CONFIRMVendor Advisory
usn.ubuntu.com/275-1/Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2006/3748VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2006-0330.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/archive/1/434524/100/0/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/19902Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10055VDB EntrySignatureX Refsource OVAL
usn.ubuntu.com/276-1/Vendor AdvisoryX Refsource UBUNTU
www.securityfocus.com/archive/1/438730/100/0/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/19941Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 72 references

secunia.com/advisories/19780Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0328.htmlVendor AdvisoryX Refsource REDHAT
www.kb.cert.org/vuls/id/179014Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/19821Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/25826VDB EntryX Refsource XF
www.gentoo.org/security/en/glsa/glsa-200604-12.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/21622Third Party AdvisoryX Refsource SECUNIA
www.zerodayinitiative.com/advisories/ZDI-06-010.htmlX Refsource MISCVendor Advisory
secunia.com/advisories/19862Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:075Vendor AdvisoryX Refsource MANDRIVA
support.avaya.com/elmodocs2/security/ASA-2006-205.htmX Refsource CONFIRM
secunia.com/advisories/19823Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2006/dsa-1051Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.htmlVendor AdvisoryX Refsource FEDORA
securityreason.com/securityalert/720Third Party AdvisoryX Refsource SREASON
www.vupen.com/english/advisories/2006/3749VDB EntryX Refsource VUPEN
usn.ubuntu.com/271-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/19714Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0329.htmlVendor AdvisoryX Refsource REDHAT
www.gentoo.org/security/en/glsa/glsa-200604-18.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/19811Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1015918VDB EntryX Refsource SECTRACKPatch
secunia.com/advisories/19794Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/19746Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21033Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/19696Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19759Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.suse.com/archive/suse-security-announce/2006-Apr/0003.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/archive/1/436338/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/archive/1/446658/100/200/threadedVendor AdvisoryX Refsource HP
www.vupen.com/english/advisories/2006/1356VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/446657/100/200/threadedVendor AdvisoryX Refsource HP
securitytracker.com/id?1015916VDB EntryX Refsource SECTRACKPatch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1614VDB EntrySignatureX Refsource OVAL
www.mandriva.com/security/advisories?name=MDKSA-2006:078Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/19729Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19649Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/20051Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19863Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1015915VDB EntryX Refsource SECTRACKPatch
www.us-cert.gov/cas/techalerts/TA06-107A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.securityfocus.com/archive/1/436296/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/bid/17516VDB EntryX Refsource BID
sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1Vendor AdvisoryX Refsource SUNALERT
www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/19852Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/19721Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/22066Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1015917VDB EntryX Refsource SECTRACKPatch
www.novell.com/linux/security/advisories/2006_04_25.htmlVendor AdvisoryX Refsource SUSE
www.gentoo.org/security/en/glsa/glsa-200605-09.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2006/3391VDB EntryX Refsource VUPEN
secunia.com/advisories/22065Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/431060/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/19631Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/19950Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:076Vendor AdvisoryX Refsource MANDRIVA
www.debian.org/security/2006/dsa-1046Vendor AdvisoryX Refsource DEBIAN
www.debian.org/security/2006/dsa-1044Vendor AdvisoryX Refsource DEBIAN
security-tracker.debian.org/tracker/CVE-2006-1730Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities