CVE-2006-5463: mozilla firefox

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2006-5463

Published 08-11-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-5463 is a high (CVSS 7.5) vulnerability in mozilla firefox. EPSS estimates a 2.83% chance of exploitation in the next 30 days, higher than 86.4% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

2.83%

0%100%

Low · +0.14 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

DSA-1224-1 DSA-1225-1 DSA-1227-1 RHSA-2006:0733 RHSA-2006:0734 RHSA-2006:0735

Timeline

08-11-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary JavaScript bytecode via unspecified vectors involving modification of a Script object while it is executing.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

2.83%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

+0.14 pp

From 2.68% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.83%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla3 products

firefox1.5 | 1.5:beta1 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7
seamonkey1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.5
thunderbird1.0 | 1.0.1 | 1.0.2 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.5 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.4 | 1.5.0.7

Debian1 product

firefox-esr< 45.0esr-1

2 vendors · 4 products

References

57 links

www.vupen.com/english/advisories/2006/3748VDB EntryX Refsource VUPEN
secunia.com/advisories/23235Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
security.gentoo.org/glsa/glsa-200612-08.xmlVendor AdvisoryX Refsource GENTOOPatch
secunia.com/advisories/23013Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2006-246.htmX Refsource CONFIRMPatchVendor Advisory
www.vupen.com/english/advisories/2007/2663VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/451099/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/22770Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.vupen.com/english/advisories/2006/4387VDB EntryX Refsource VUPEN
www.debian.org/security/2006/dsa-1225Vendor AdvisoryX Refsource DEBIANPatch

Show all 57 references

issues.rpath.com/browse/RPL-765X Refsource CONFIRM
secunia.com/advisories/23009Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=355655X Refsource MISC
www.us-cert.gov/cas/techalerts/TA06-312A.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
www.debian.org/security/2006/dsa-1227Vendor AdvisoryX Refsource DEBIANPatch
secunia.com/advisories/22980Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
rhn.redhat.com/errata/RHSA-2006-0733.htmlVendor AdvisoryX Refsource REDHATPatch
secunia.com/advisories/24711Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1017184VDB EntryX Refsource SECTRACKPatch
secunia.com/advisories/23263Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22763Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/30116VDB EntryX Refsource XF
secunia.com/advisories/22965Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.ubuntu.com/usn/usn-382-1Vendor AdvisoryX Refsource UBUNTUPatch
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
rhn.redhat.com/errata/RHSA-2006-0735.htmlVendor AdvisoryX Refsource REDHATPatch
www.novell.com/linux/security/advisories/2006_68_mozilla.htmlVendor AdvisoryX Refsource SUSEPatch
security.gentoo.org/glsa/glsa-200612-07.xmlVendor AdvisoryX Refsource GENTOOPatch
www.vupen.com/english/advisories/2007/1198VDB EntryX Refsource VUPEN
secunia.com/advisories/23297Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22727Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22815Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2006-0734.htmlVendor AdvisoryX Refsource REDHATPatch
www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742Vendor AdvisoryX Refsource HP
secunia.com/advisories/22737Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-103011-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/22929Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10357VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/23202Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
security.gentoo.org/glsa/glsa-200612-06.xmlVendor AdvisoryX Refsource GENTOOPatch
www.mandriva.com/security/advisories?name=MDKSA-2006:206Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/20957VDB EntryX Refsource BID
www.mozilla.org/security/announce/2006/mfsa2006-67.htmlX Refsource CONFIRMPatch
secunia.com/advisories/23197Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.debian.org/security/2006/dsa-1224Vendor AdvisoryX Refsource DEBIANPatch
secunia.com/advisories/22066Third Party AdvisoryX Refsource SECUNIA
www.kb.cert.org/vuls/id/714496Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
sunsolve.sun.com/search/document.do?assetkey=1-66-200185-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/22774Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
securitytracker.com/id?1017185VDB EntryX Refsource SECTRACKPatch
secunia.com/advisories/22817Third Party AdvisoryX Refsource SECUNIAPatch
securitytracker.com/id?1017186VDB EntryX Refsource SECTRACKPatch
secunia.com/advisories/22722Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:205Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/23287Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.ubuntu.com/usn/usn-381-1Vendor AdvisoryX Refsource UBUNTUPatch
security-tracker.debian.org/tracker/CVE-2006-5463Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities