CVE-2006-5747: mozilla firefox

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2006-5747

Published 08-11-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-5747 is a high (CVSS 7.5) vulnerability in mozilla firefox. EPSS estimates a 6.14% chance of exploitation in the next 30 days, higher than 93.3% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

6.14%

0%100%

Low · +0.47 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3

RHSA-2006:0733 RHSA-2006:0734 RHSA-2006:0735

Timeline

08-11-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

6.14%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

+0.47 pp

From 5.67% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla3 products

firefox1.5 | 1.5:beta1 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7
seamonkey1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.5
thunderbird1.0 | 1.0.1 | 1.0.2 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.5 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.4 | 1.5.0.7

Debian1 product

firefox-esr< 45.0esr-1

2 vendors · 4 products

References

48 links

bugzilla.mozilla.org/show_bug.cgi?id=355569X Refsource MISC
www.vupen.com/english/advisories/2006/3748VDB EntryX Refsource VUPEN
securitytracker.com/id?1017178VDB EntryX Refsource SECTRACKPatch
securitytracker.com/id?1017179VDB EntryX Refsource SECTRACKPatch
security.gentoo.org/glsa/glsa-200612-08.xmlVendor AdvisoryX Refsource GENTOOPatch
secunia.com/advisories/23013Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2006-246.htmX Refsource CONFIRMPatchVendor Advisory
www.mozilla.org/security/announce/2006/mfsa2006-65.htmlX Refsource CONFIRMVendor Advisory
www.securityfocus.com/archive/1/451099/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/22770Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory

Show all 48 references

www.vupen.com/english/advisories/2006/4387VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/30093VDB EntryX Refsource XF
issues.rpath.com/browse/RPL-765X Refsource CONFIRM
secunia.com/advisories/23009Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.us-cert.gov/cas/techalerts/TA06-312A.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
secunia.com/advisories/22980Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
rhn.redhat.com/errata/RHSA-2006-0733.htmlVendor AdvisoryX Refsource REDHATPatch
secunia.com/advisories/24711Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23263Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22763Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22965Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.ubuntu.com/usn/usn-382-1Vendor AdvisoryX Refsource UBUNTUPatch
securitytracker.com/id?1017177VDB EntryX Refsource SECTRACKPatch
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
rhn.redhat.com/errata/RHSA-2006-0735.htmlVendor AdvisoryX Refsource REDHATPatch
www.novell.com/linux/security/advisories/2006_68_mozilla.htmlVendor AdvisoryX Refsource SUSEPatch
security.gentoo.org/glsa/glsa-200612-07.xmlVendor AdvisoryX Refsource GENTOOPatch
www.kb.cert.org/vuls/id/815432Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
www.vupen.com/english/advisories/2007/1198VDB EntryX Refsource VUPEN
secunia.com/advisories/23297Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22727Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22815Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2006-0734.htmlVendor AdvisoryX Refsource REDHATPatch
www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742Vendor AdvisoryX Refsource HP
secunia.com/advisories/22737Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22929Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
security.gentoo.org/glsa/glsa-200612-06.xmlVendor AdvisoryX Refsource GENTOOPatch
www.mandriva.com/security/advisories?name=MDKSA-2006:206Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/20957VDB EntryX Refsource BID
secunia.com/advisories/22066Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/22774Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11496VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/22817Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22722Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:205Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/23287Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.ubuntu.com/usn/usn-381-1Vendor AdvisoryX Refsource UBUNTUPatch
security-tracker.debian.org/tracker/CVE-2006-5747Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities