{"schemaVersion":3,"id":"CVE-2006-3809","aliases":["DEBIAN-CVE-2006-3809"],"status":"published","duplicateOf":null,"title":null,"description":"Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context.","dates":{"published":"2006-07-27T20:00:00.000Z","modified":"2024-08-07T18:48:38.179Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03094,"percentile":0.87546,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03094},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03094,"percentile":0.87546}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03094,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03094,"percentile":0.87546}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"debian","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/thunderbird","purlType":"deb","versions":[{"text":"< 1.5.0.5-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0.5-1","eol":null,"hubHref":null},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.0.1 | 1.0.2","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5.0.2 | 1.5.0.4","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.debian.org/security/2006/dsa-1161","label":"www.debian.org/security/2006/dsa-1161","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/21243","label":"secunia.com/advisories/21243","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","label":"www.redhat.com/support/errata/RHSA-2006-0608.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.debian.org/security/2006/dsa-1160","label":"www.debian.org/security/2006/dsa-1160","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","label":"security.gentoo.org/glsa/glsa-200608-02.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:145","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.vupen.com/english/advisories/2006/3748","label":"www.vupen.com/english/advisories/2006/3748","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/bid/19181","label":"www.securityfocus.com/bid/19181","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Patch"]},{"url":"http://secunia.com/advisories/22055","label":"secunia.com/advisories/22055","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/2998","label":"www.vupen.com/english/advisories/2006/2998","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.ubuntu.com/usn/usn-361-1","label":"www.ubuntu.com/usn/usn-361-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","label":"www.securityfocus.com/archive/1/441333/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/21529","label":"secunia.com/advisories/21529","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21216","label":"secunia.com/advisories/21216","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","label":"www.gentoo.org/security/en/glsa/glsa-200608-03.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","label":"www.redhat.com/support/errata/RHSA-2006-0594.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21336","label":"secunia.com/advisories/21336","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/3749","label":"www.vupen.com/english/advisories/2006/3749","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","label":"www.redhat.com/support/errata/RHSA-2006-0610.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9753","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9753","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/21654","label":"secunia.com/advisories/21654","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1016588","label":"securitytracker.com/id?1016588","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://usn.ubuntu.com/329-1/","label":"usn.ubuntu.com/329-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:146","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","label":"rhn.redhat.com/errata/RHSA-2006-0609.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/22210","label":"secunia.com/advisories/22210","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-53.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-53.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21634","label":"secunia.com/advisories/21634","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21607","label":"secunia.com/advisories/21607","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1016586","label":"securitytracker.com/id?1016586","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/19873","label":"secunia.com/advisories/19873","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21262","label":"secunia.com/advisories/21262","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21532","label":"secunia.com/advisories/21532","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21270","label":"secunia.com/advisories/21270","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://usn.ubuntu.com/327-1/","label":"usn.ubuntu.com/327-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/21361","label":"secunia.com/advisories/21361","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21631","label":"secunia.com/advisories/21631","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","label":"www.securityfocus.com/archive/1/446658/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","label":"www.securityfocus.com/archive/1/446657/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://secunia.com/advisories/21275","label":"secunia.com/advisories/21275","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21246","label":"secunia.com/advisories/21246","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","label":"www.novell.com/linux/security/advisories/2006_48_seamonkey.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://secunia.com/advisories/21229","label":"secunia.com/advisories/21229","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21675","label":"secunia.com/advisories/21675","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1016587","label":"securitytracker.com/id?1016587","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","label":"www.redhat.com/support/errata/RHSA-2006-0611.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21228","label":"secunia.com/advisories/21228","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21250","label":"secunia.com/advisories/21250","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-350-1","label":"www.ubuntu.com/usn/usn-350-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/22342","label":"secunia.com/advisories/22342","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21358","label":"secunia.com/advisories/21358","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://issues.rpath.com/browse/RPL-536","label":"issues.rpath.com/browse/RPL-536","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"https://issues.rpath.com/browse/RPL-537","label":"issues.rpath.com/browse/RPL-537","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/22066","label":"secunia.com/advisories/22066","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21269","label":"secunia.com/advisories/21269","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27990","label":"exchange.xforce.ibmcloud.com/vulnerabilities/27990","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","label":"security.gentoo.org/glsa/glsa-200608-04.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/21343","label":"secunia.com/advisories/21343","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:143","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/22065","label":"secunia.com/advisories/22065","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-354-1","label":"www.ubuntu.com/usn/usn-354-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.debian.org/security/2006/dsa-1159","label":"www.debian.org/security/2006/dsa-1159","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-3809","label":"security-tracker.debian.org/tracker/CVE-2006-3809","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1159","DSA-1160","DSA-1161","RHSA-2006:0608","RHSA-2006:0609","RHSA-2006:0610","RHSA-2006:0611"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-07-27T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T18:48:38.179Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:22:49.097Z","stale":false,"partial":false}}