{"schemaVersion":3,"id":"CVE-2006-2778","aliases":["DEBIAN-CVE-2006-2778"],"status":"published","duplicateOf":null,"title":null,"description":"The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.","dates":{"published":"2006-06-02T18:00:00.000Z","modified":"2024-08-07T17:58:52.366Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04907,"percentile":0.92012,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.04907},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04907,"percentile":0.92012}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04907,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04907,"percentile":0.92012}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"debian","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/thunderbird","purlType":"deb","versions":[{"text":"< 1.5.0.4-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0.4-1","eol":null,"hubHref":null},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.5.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.5.0.3","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.5.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.5.0.3","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/advisories/20709","label":"secunia.com/advisories/20709","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21176","label":"secunia.com/advisories/21176","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:145","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.vupen.com/english/advisories/2006/3748","label":"www.vupen.com/english/advisories/2006/3748","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://usn.ubuntu.com/297-3/","label":"usn.ubuntu.com/297-3/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"https://usn.ubuntu.com/296-1/","label":"usn.ubuntu.com/296-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"https://usn.ubuntu.com/323-1/","label":"usn.ubuntu.com/323-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/20561","label":"secunia.com/advisories/20561","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-153A.html","label":"www.us-cert.gov/cas/techalerts/TA06-153A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://secunia.com/advisories/21210","label":"secunia.com/advisories/21210","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2007/0058","label":"www.vupen.com/english/advisories/2007/0058","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","label":"www.redhat.com/support/errata/RHSA-2006-0594.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21336","label":"secunia.com/advisories/21336","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/20382","label":"secunia.com/advisories/20382","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1016214","label":"securitytracker.com/id?1016214","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.securityfocus.com/archive/1/435795/100/0/threaded","label":"www.securityfocus.com/archive/1/435795/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.vupen.com/english/advisories/2006/3749","label":"www.vupen.com/english/advisories/2006/3749","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","label":"www.redhat.com/support/errata/RHSA-2006-0610.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/20376","label":"secunia.com/advisories/20376","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:146","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","label":"rhn.redhat.com/errata/RHSA-2006-0609.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21178","label":"secunia.com/advisories/21178","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1016202","label":"securitytracker.com/id?1016202","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/21607","label":"secunia.com/advisories/21607","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-38.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-38.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM"]},{"url":"http://www.securityfocus.com/bid/18228","label":"www.securityfocus.com/bid/18228","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://secunia.com/advisories/21532","label":"secunia.com/advisories/21532","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21270","label":"secunia.com/advisories/21270","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/21188","label":"secunia.com/advisories/21188","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21134","label":"secunia.com/advisories/21134","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21631","label":"secunia.com/advisories/21631","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","label":"www.securityfocus.com/archive/1/446658/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","label":"www.securityfocus.com/archive/1/446657/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"https://usn.ubuntu.com/296-2/","label":"usn.ubuntu.com/296-2/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml","label":"www.gentoo.org/security/en/glsa/glsa-200606-21.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.debian.org/security/2006/dsa-1118","label":"www.debian.org/security/2006/dsa-1118","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.debian.org/security/2006/dsa-1120","label":"www.debian.org/security/2006/dsa-1120","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","label":"www.redhat.com/support/errata/RHSA-2006-0611.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26849","label":"exchange.xforce.ibmcloud.com/vulnerabilities/26849","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.debian.org/security/2006/dsa-1134","label":"www.debian.org/security/2006/dsa-1134","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml","label":"www.gentoo.org/security/en/glsa/glsa-200606-12.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/21324","label":"secunia.com/advisories/21324","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21183","label":"secunia.com/advisories/21183","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://secunia.com/advisories/22066","label":"secunia.com/advisories/22066","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21269","label":"secunia.com/advisories/21269","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.novell.com/linux/security/advisories/2006_35_mozilla.html","label":"www.novell.com/linux/security/advisories/2006_35_mozilla.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"https://usn.ubuntu.com/297-1/","label":"usn.ubuntu.com/297-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0578.html","label":"www.redhat.com/support/errata/RHSA-2006-0578.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.vupen.com/english/advisories/2006/2106","label":"www.vupen.com/english/advisories/2006/2106","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:143","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/22065","label":"secunia.com/advisories/22065","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9703","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9703","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://www.kb.cert.org/vuls/id/421529","label":"www.kb.cert.org/vuls/id/421529","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-2778","label":"security-tracker.debian.org/tracker/CVE-2006-2778","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1118","DSA-1120","DSA-1134-1","RHSA-2006:0578","RHSA-2006:0609","RHSA-2006:0610","RHSA-2006:0611"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-06-02T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T17:58:52.366Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:43:26.980Z","stale":false,"partial":false}}