{"schemaVersion":3,"id":"CVE-2006-3803","aliases":["DEBIAN-CVE-2006-3803"],"status":"published","duplicateOf":null,"title":null,"description":"Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.","dates":{"published":"2006-07-27T19:00:00.000Z","modified":"2024-08-07T18:48:37.876Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.1,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5.1,"severity":"medium","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0446,"percentile":0.91332,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0446},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0446,"percentile":0.91332}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0446,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0446,"percentile":0.91332}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"debian","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/thunderbird","purlType":"deb","versions":[{"text":"< 1.5.0.5-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0.5-1","eol":null,"hubHref":null},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.0.1 | 1.0.2","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5.0.2 | 1.5.0.4","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/advisories/21243","label":"secunia.com/advisories/21243","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","label":"www.redhat.com/support/errata/RHSA-2006-0608.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","label":"security.gentoo.org/glsa/glsa-200608-02.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:145","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.vupen.com/english/advisories/2006/3748","label":"www.vupen.com/english/advisories/2006/3748","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/bid/19181","label":"www.securityfocus.com/bid/19181","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html","label":"www.us-cert.gov/cas/techalerts/TA06-208A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://secunia.com/advisories/22055","label":"secunia.com/advisories/22055","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/2998","label":"www.vupen.com/english/advisories/2006/2998","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","label":"www.securityfocus.com/archive/1/441333/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/21529","label":"secunia.com/advisories/21529","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21216","label":"secunia.com/advisories/21216","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","label":"www.gentoo.org/security/en/glsa/glsa-200608-03.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","label":"www.redhat.com/support/errata/RHSA-2006-0594.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21336","label":"secunia.com/advisories/21336","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/3749","label":"www.vupen.com/english/advisories/2006/3749","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","label":"www.redhat.com/support/errata/RHSA-2006-0610.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://securitytracker.com/id?1016588","label":"securitytracker.com/id?1016588","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://usn.ubuntu.com/329-1/","label":"usn.ubuntu.com/329-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:146","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","label":"rhn.redhat.com/errata/RHSA-2006-0609.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/22210","label":"secunia.com/advisories/22210","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21607","label":"secunia.com/advisories/21607","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1016586","label":"securitytracker.com/id?1016586","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/19873","label":"secunia.com/advisories/19873","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21262","label":"secunia.com/advisories/21262","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21532","label":"secunia.com/advisories/21532","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21270","label":"secunia.com/advisories/21270","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://usn.ubuntu.com/327-1/","label":"usn.ubuntu.com/327-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/21361","label":"secunia.com/advisories/21361","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21631","label":"secunia.com/advisories/21631","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","label":"www.securityfocus.com/archive/1/446658/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","label":"www.securityfocus.com/archive/1/446657/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://secunia.com/advisories/21275","label":"secunia.com/advisories/21275","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21246","label":"secunia.com/advisories/21246","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","label":"www.novell.com/linux/security/advisories/2006_48_seamonkey.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://secunia.com/advisories/21229","label":"secunia.com/advisories/21229","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016587","label":"securitytracker.com/id?1016587","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27984","label":"exchange.xforce.ibmcloud.com/vulnerabilities/27984","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","label":"www.redhat.com/support/errata/RHSA-2006-0611.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21228","label":"secunia.com/advisories/21228","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21250","label":"secunia.com/advisories/21250","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-350-1","label":"www.ubuntu.com/usn/usn-350-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/21358","label":"secunia.com/advisories/21358","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.kb.cert.org/vuls/id/265964","label":"www.kb.cert.org/vuls/id/265964","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"https://issues.rpath.com/browse/RPL-536","label":"issues.rpath.com/browse/RPL-536","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"https://issues.rpath.com/browse/RPL-537","label":"issues.rpath.com/browse/RPL-537","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/22066","label":"secunia.com/advisories/22066","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10635","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10635","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/21269","label":"secunia.com/advisories/21269","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","label":"security.gentoo.org/glsa/glsa-200608-04.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/21343","label":"secunia.com/advisories/21343","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-48.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-48.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:143","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/22065","label":"secunia.com/advisories/22065","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-354-1","label":"www.ubuntu.com/usn/usn-354-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-3803","label":"security-tracker.debian.org/tracker/CVE-2006-3803","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["RHSA-2006:0608","RHSA-2006:0609","RHSA-2006:0610","RHSA-2006:0611"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-07-27T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T18:48:37.876Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T13:33:14.381Z","stale":false,"partial":false}}