CVE-2006-3806: mozilla firefox Numeric Errors

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2006-3806

Published 27-07-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-3806 is a high (CVSS 7.5) Numeric Errors vulnerability in mozilla firefox. EPSS estimates a 5.46% chance of exploitation in the next 30 days, higher than 92.6% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

5.46%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7

DSA-1159 DSA-1160 DSA-1161 RHSA-2006:0608 RHSA-2006:0609 RHSA-2006:0610+1 more

Timeline

27-07-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified "string function arguments."

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

5.46%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.46% on 19-09-2026

19-09-202619-10-2026

EPSS score

5.46%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Mozilla3 products

firefox1.5 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4
seamonkey1.0 | 1.0.1 | 1.0.2
thunderbird1.5 | 1.5.0.2 | 1.5.0.4

Debian1 product

thunderbird< 1.5.0.5-1

2 vendors · 4 products

References

68 links

www.debian.org/security/2006/dsa-1161Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/21243Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0608.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2006/dsa-1160Vendor AdvisoryX Refsource DEBIAN
security.gentoo.org/glsa/glsa-200608-02.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDKSA-2006:145Vendor AdvisoryX Refsource MANDRIVA
www.kb.cert.org/vuls/id/655892Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.vupen.com/english/advisories/2006/3748VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/19181VDB EntryX Refsource BIDPatch
www.us-cert.gov/cas/techalerts/TA06-208A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource

Show all 68 references

secunia.com/advisories/22055Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/2998VDB EntryX Refsource VUPEN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232VDB EntrySignatureX Refsource OVAL
www.ubuntu.com/usn/usn-361-1Vendor AdvisoryX Refsource UBUNTU
www.securityfocus.com/archive/1/441333/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21529Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21216Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200608-03.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2007/0058VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2006-0594.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21336Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2006/3749VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2006-0610.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21654Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1016588VDB EntryX Refsource SECTRACK
usn.ubuntu.com/329-1/Vendor AdvisoryX Refsource UBUNTU
www.mandriva.com/security/advisories?name=MDKSA-2006:146Vendor AdvisoryX Refsource MANDRIVA
rhn.redhat.com/errata/RHSA-2006-0609.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/22210Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21634Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21607Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1016586VDB EntryX Refsource SECTRACK
secunia.com/advisories/19873Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.mozilla.org/security/announce/2006/mfsa2006-50.htmlX Refsource CONFIRMVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/27987VDB EntryX Refsource XF
secunia.com/advisories/21262Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21532Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21270Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
usn.ubuntu.com/327-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/21361Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21631Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/446658/100/200/threadedVendor AdvisoryX Refsource HP
www.securityfocus.com/archive/1/446657/100/200/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/21275Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21246Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2006_48_seamonkey.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/21229Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/21675Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1016587VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2006-0611.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21228Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/21250Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-350-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/22342Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/21358Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-536X Refsource CONFIRM
issues.rpath.com/browse/RPL-537X Refsource CONFIRM
secunia.com/advisories/22066Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21269Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security.gentoo.org/glsa/glsa-200608-04.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/21343Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:143Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/22065Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-354-1Vendor AdvisoryX Refsource UBUNTU
www.debian.org/security/2006/dsa-1159Vendor AdvisoryX Refsource DEBIAN
security-tracker.debian.org/tracker/CVE-2006-3806Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities