CVE-2006-3113: mozilla firefox

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2006-3113

Published 27-07-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-3113 is a high (CVSS 7.5) vulnerability in mozilla firefox. EPSS estimates a 6.42% chance of exploitation in the next 30 days, higher than 93.6% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

6.42%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

RHSA-2006:0608 RHSA-2006:0609 RHSA-2006:0610 RHSA-2006:0611

Timeline

27-07-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

6.42%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.42% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla3 products

firefox1.5 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4
seamonkey1.0 | 1.0.1 | 1.0.2
thunderbird1.5 | 1.5.0.2 | 1.5.0.4

Debian1 product

thunderbird< 1.5.0.5-1

2 vendors · 4 products

References

61 links

www.kb.cert.org/vuls/id/239124Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/21243Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0608.htmlVendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-200608-02.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDKSA-2006:145Vendor AdvisoryX Refsource MANDRIVA
secunia.com/secunia_research/2006-53/advisory/X Refsource MISCVendor Advisory
www.vupen.com/english/advisories/2006/3748VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/19181VDB EntryX Refsource BIDPatch
www.us-cert.gov/cas/techalerts/TA06-208A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/22055Third Party AdvisoryX Refsource SECUNIA

Show all 61 references

exchange.xforce.ibmcloud.com/vulnerabilities/27982VDB EntryX Refsource XF
www.vupen.com/english/advisories/2006/2998VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/441333/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21529Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/19197VDB EntryX Refsource BIDPatch
secunia.com/advisories/21216Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200608-03.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2006-0594.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21336Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/3749VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/441330/100/0/threadedMailing ListX Refsource BUGTRAQ
www.redhat.com/support/errata/RHSA-2006-0610.htmlVendor AdvisoryX Refsource REDHAT
securitytracker.com/id?1016588VDB EntryX Refsource SECTRACK
usn.ubuntu.com/329-1/Vendor AdvisoryX Refsource UBUNTU
www.mandriva.com/security/advisories?name=MDKSA-2006:146Vendor AdvisoryX Refsource MANDRIVA
rhn.redhat.com/errata/RHSA-2006-0609.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/22210Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21607Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1016586VDB EntryX Refsource SECTRACK
secunia.com/advisories/19873Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/21262Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21532Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21270Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
usn.ubuntu.com/327-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/21361Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21631Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/446658/100/200/threadedVendor AdvisoryX Refsource HP
www.securityfocus.com/archive/1/446657/100/200/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/21275Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21246Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_48_seamonkey.htmlVendor AdvisoryX Refsource SUSE
www.mozilla.org/security/announce/2006/mfsa2006-46.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/21229Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10261VDB EntrySignatureX Refsource OVAL
securitytracker.com/id?1016587VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2006-0611.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21228Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/21250Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-350-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/21358Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-536X Refsource CONFIRM
issues.rpath.com/browse/RPL-537X Refsource CONFIRM
secunia.com/advisories/22066Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21269Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200608-04.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/21343Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:143Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/22065Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-354-1Vendor AdvisoryX Refsource UBUNTU
security-tracker.debian.org/tracker/CVE-2006-3113Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities