CVE-2006-3808: mozilla firefox

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2006-3808

Published 27-07-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-3808 is a high (CVSS 7.5) vulnerability in mozilla firefox. EPSS estimates a 2.95% chance of exploitation in the next 30 days, higher than 86.9% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

2.95%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7

DSA-1159 DSA-1160 DSA-1161 RHSA-2006:0608 RHSA-2006:0609 RHSA-2006:0610+1 more

Timeline

27-07-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

2.95%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

0.00 pp

From 2.95% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.95%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla2 products

firefox1.5 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4
seamonkey1.0 | 1.0.1 | 1.0.2

Debian1 product

thunderbird< 1.5.0.5-1

2 vendors · 3 products

References

55 links

www.debian.org/security/2006/dsa-1161Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/21243Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0608.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2006/dsa-1160Vendor AdvisoryX Refsource DEBIAN
security.gentoo.org/glsa/glsa-200608-02.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDKSA-2006:145Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2006/3748VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/19181VDB EntryX Refsource BIDPatch
www.vupen.com/english/advisories/2006/2998VDB EntryX Refsource VUPEN
www.ubuntu.com/usn/usn-361-1Vendor AdvisoryX Refsource UBUNTU

Show all 55 references

www.securityfocus.com/archive/1/441333/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21529Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21216Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200608-03.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2006-0594.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21336Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/3749VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2006-0610.htmlVendor AdvisoryX Refsource REDHAT
www.mozilla.org/security/announce/2006/mfsa2006-52.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/21654Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1016588VDB EntryX Refsource SECTRACK
rhn.redhat.com/errata/RHSA-2006-0609.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/22210Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21634Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1016586VDB EntryX Refsource SECTRACK
secunia.com/advisories/19873Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/21262Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21532Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21270Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
usn.ubuntu.com/327-1/Vendor AdvisoryX Refsource UBUNTU
exchange.xforce.ibmcloud.com/vulnerabilities/27989VDB EntryX Refsource XF
secunia.com/advisories/21361Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21631Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/446658/100/200/threadedVendor AdvisoryX Refsource HP
www.securityfocus.com/archive/1/446657/100/200/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/21246Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_48_seamonkey.htmlVendor AdvisoryX Refsource SUSE
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10845VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/21229Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/21675Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1016587VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2006-0611.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21250Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/22342Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-536X Refsource CONFIRM
issues.rpath.com/browse/RPL-537X Refsource CONFIRM
secunia.com/advisories/22066Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21269Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21343Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:143Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/22065Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-354-1Vendor AdvisoryX Refsource UBUNTU
www.debian.org/security/2006/dsa-1159Vendor AdvisoryX Refsource DEBIAN
security-tracker.debian.org/tracker/CVE-2006-3808Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities