CVE-2006-3677: mozilla firefox Configuration

EPSS trend

Probability

78.69%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 78.69% on 19-09-2026

19-09-202619-10-2026

EPSS score

78.69%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

exploit-databaseremotemultipleVerified
Mozilla Firefox 1.5.0.4 - JavaScript Navigator Object Code Execution
Maturity: weaponized
exploit-databaseremotemultipleVerified
Mozilla Suite/Firefox - Navigator Object Code Execution (Metasploit)
Maturity: weaponized
exploit-databaseremotemultipleVerified
Mozilla Suite/Firefox < 1.5.0.5 - Navigator Object Code Execution (Metasploit)
Maturity: weaponized

Show all 4 exploits

MetasploitremoteUnverified
Mozilla Suite/Firefox Navigator Object Code Execution
exploit/multi/browser/mozilla_navigatorjava
Maturity: poc

References

46 links

www.securityfocus.com/archive/1/441332/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21243Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0608.htmlVendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-200608-02.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDKSA-2006:145Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2006/3748VDB EntryX Refsource VUPENVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/39998VDB EntryX Refsource XF
www.securityfocus.com/bid/19181VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/27981VDB EntryX Refsource XF
www.us-cert.gov/cas/techalerts/TA06-208A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource

Show all 46 references

www.vupen.com/english/advisories/2006/2998VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/archive/1/441333/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21529Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-06-025.htmlX Refsource MISCVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/21216Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200608-03.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2006-0594.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21336Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0610.htmlVendor AdvisoryX Refsource REDHAT
www.kb.cert.org/vuls/id/670060Third Party AdvisoryX Refsource CERT VNUS Government Resource
rhn.redhat.com/errata/RHSA-2006-0609.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/22210Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1016586VDB EntryX Refsource SECTRACK
secunia.com/advisories/19873Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/21262Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mozilla.org/security/announce/2006/mfsa2006-45.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/21532Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21270Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPENVendor Advisory
usn.ubuntu.com/327-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/21361Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21631Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/446658/100/200/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/21246Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2006_48_seamonkey.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/21229Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
securitytracker.com/id?1016587VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2006-0611.htmlVendor AdvisoryX Refsource REDHAT
issues.rpath.com/browse/RPL-536X Refsource CONFIRM
secunia.com/advisories/22066Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21269Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21343Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:143Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/19192VDB EntryX Refsource BIDPatch
www.ubuntu.com/usn/usn-354-1Vendor AdvisoryX Refsource UBUNTU

Related vulnerabilities

CVE-2013-1735mozillafirefox+34.73%13y ago18-09-2013 10:00Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling.CVE-2013-1718mozillafirefox+35.44%13y ago18-09-2013 10:00Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.CVE-2013-1717mozillafirefox+32.40%13y ago07-08-2013 01:00Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.CVE-2013-1723mozillafirefox+21.80%13y ago18-09-2013 10:00The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service (application crash) by leveraging incorrect event usage after widget-memory reallocation.CVE-2013-1713mozillafirefox+31.62%13y ago07-08-2013 01:00Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.CVE-2013-1708mozillafirefox+13.18%13y ago07-08-2013 01:00Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.

All vulnerabilities infirefox seamonkey

CVE-2006-3677: mozilla firefox Configuration

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References