{"schemaVersion":3,"id":"CVE-2006-3677","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.","dates":{"published":"2006-07-27T19:00:00.000Z","modified":"2024-08-07T18:39:53.571Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.78685,"percentile":0.99587,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.78685},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.78685,"percentile":0.99587}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.78685,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.78685,"percentile":0.99587}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"2082","name":"Mozilla Firefox 1.5.0.4 - JavaScript Navigator Object Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/2082","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"multiple","file":"exploits/multiple/remote/2082.html","codes":["CVE-2006-3677"]},"metasploit":null},{"id":"16300","name":"Mozilla Suite/Firefox - Navigator Object Code Execution (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16300","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"multiple","file":"exploits/multiple/remote/16300.rb","codes":["CVE-2006-3677","OSVDB-27559"]},"metasploit":null},{"id":"9946","name":"Mozilla Suite/Firefox < 1.5.0.5 - Navigator Object Code Execution (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/9946","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"multiple","file":"exploits/multiple/remote/9946.rb","codes":["CVE-2006-3677","OSVDB-27559"]},"metasploit":null},{"id":"MSF_EXPLOIT_MULTI_BROWSER_MOZILLA_NAVIGATORJAVA","name":"Mozilla Suite/Firefox Navigator Object Code Execution","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/browser/mozilla_navigatorjava.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/multi/browser/mozilla_navigatorjava","rank":"300","rankName":"normal","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":4,"weaknesses":[{"id":"CWE-16","name":"Configuration","description":"Weaknesses in this category are typically introduced during the configuration of the software.","type":"category","status":"Obsolete","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/16.html"}],"affected":[{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.0.1 | 1.0.2","eol":null,"hubHref":"/vendor/mozilla/seamonkey"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/archive/1/441332/100/0/threaded","label":"www.securityfocus.com/archive/1/441332/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/21243","label":"secunia.com/advisories/21243","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","label":"www.redhat.com/support/errata/RHSA-2006-0608.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","label":"security.gentoo.org/glsa/glsa-200608-02.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:145","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.vupen.com/english/advisories/2006/3748","label":"www.vupen.com/english/advisories/2006/3748","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39998","label":"exchange.xforce.ibmcloud.com/vulnerabilities/39998","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.securityfocus.com/bid/19181","label":"www.securityfocus.com/bid/19181","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27981","label":"exchange.xforce.ibmcloud.com/vulnerabilities/27981","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html","label":"www.us-cert.gov/cas/techalerts/TA06-208A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2006/2998","label":"www.vupen.com/english/advisories/2006/2998","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","label":"www.securityfocus.com/archive/1/441333/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/21529","label":"secunia.com/advisories/21529","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-025.html","label":"www.zerodayinitiative.com/advisories/ZDI-06-025.html","hostname":"www.zerodayinitiative.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/21216","label":"secunia.com/advisories/21216","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","label":"www.gentoo.org/security/en/glsa/glsa-200608-03.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","label":"www.redhat.com/support/errata/RHSA-2006-0594.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21336","label":"secunia.com/advisories/21336","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","label":"www.redhat.com/support/errata/RHSA-2006-0610.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.kb.cert.org/vuls/id/670060","label":"www.kb.cert.org/vuls/id/670060","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","label":"rhn.redhat.com/errata/RHSA-2006-0609.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/22210","label":"secunia.com/advisories/22210","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016586","label":"securitytracker.com/id?1016586","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/19873","label":"secunia.com/advisories/19873","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21262","label":"secunia.com/advisories/21262","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-45.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-45.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21532","label":"secunia.com/advisories/21532","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21270","label":"secunia.com/advisories/21270","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"https://usn.ubuntu.com/327-1/","label":"usn.ubuntu.com/327-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/21361","label":"secunia.com/advisories/21361","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21631","label":"secunia.com/advisories/21631","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","label":"www.securityfocus.com/archive/1/446658/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://secunia.com/advisories/21246","label":"secunia.com/advisories/21246","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","label":"www.novell.com/linux/security/advisories/2006_48_seamonkey.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://secunia.com/advisories/21229","label":"secunia.com/advisories/21229","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016587","label":"securitytracker.com/id?1016587","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","label":"www.redhat.com/support/errata/RHSA-2006-0611.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://issues.rpath.com/browse/RPL-536","label":"issues.rpath.com/browse/RPL-536","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/22066","label":"secunia.com/advisories/22066","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21269","label":"secunia.com/advisories/21269","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21343","label":"secunia.com/advisories/21343","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:143","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.securityfocus.com/bid/19192","label":"www.securityfocus.com/bid/19192","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Patch"]},{"url":"http://www.ubuntu.com/usn/usn-354-1","label":"www.ubuntu.com/usn/usn-354-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]}],"lineage":{"upstream":[],"downstream":["RHSA-2006:0608","RHSA-2006:0609","RHSA-2006:0610","RHSA-2006:0611"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-07-27T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T18:39:53.571Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":56,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T13:46:26.049Z","stale":false,"partial":false}}