CVE-2006-5748: mozilla firefox

CVSS: 5.0v2.0MediumModified

AliasesDEBIAN-CVE-2006-5748

Published 08-11-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-5748 is a medium (CVSS 5.0) vulnerability in mozilla firefox. EPSS estimates a 6.13% chance of exploitation in the next 30 days, higher than 93.3% of scored vulnerabilities.

Overall risk

21/100

0100

Low · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

6.13%

0%100%

Low · +0.47 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

DSA-1224-1 DSA-1225-1 DSA-1227-1 RHSA-2006:0733 RHSA-2006:0734 RHSA-2006:0735

Timeline

08-11-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger memory corruption.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

6.13%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

+0.47 pp

From 5.67% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla3 products

firefox1.5 | 1.5:beta1 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7
seamonkey1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.5
thunderbird1.0 | 1.0.1 | 1.0.2 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.5 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.4 | 1.5.0.7

Debian1 product

firefox-esr< 45.0esr-1

2 vendors · 4 products

References

66 links

bugzilla.mozilla.org/show_bug.cgi?id=352271X Refsource MISC
www.vupen.com/english/advisories/2006/3748VDB EntryX Refsource VUPEN
securitytracker.com/id?1017178VDB EntryX Refsource SECTRACKPatch
secunia.com/advisories/27603Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1017179VDB EntryX Refsource SECTRACKPatch
secunia.com/advisories/23235Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
security.gentoo.org/glsa/glsa-200612-08.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/23013Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2006-246.htmX Refsource CONFIRMPatch
www.mozilla.org/security/announce/2006/mfsa2006-65.htmlX Refsource CONFIRMPatchVendor Advisory

Show all 66 references

www.securityfocus.com/archive/1/451099/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/22770Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
sunsolve.sun.com/search/document.do?assetkey=1-66-201335-1Vendor AdvisoryX Refsource SUNALERT
exchange.xforce.ibmcloud.com/vulnerabilities/30096VDB EntryX Refsource XF
www.vupen.com/english/advisories/2006/4387VDB EntryX Refsource VUPEN
www.debian.org/security/2006/dsa-1225Vendor AdvisoryX Refsource DEBIANPatch
bugzilla.mozilla.org/show_bug.cgi?id=349527X Refsource MISC
bugzilla.mozilla.org/show_bug.cgi?id=354145X Refsource MISC
issues.rpath.com/browse/RPL-765X Refsource CONFIRM
secunia.com/advisories/23009Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.us-cert.gov/cas/techalerts/TA06-312A.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
www.debian.org/security/2006/dsa-1227Vendor AdvisoryX Refsource DEBIANPatch
bugzilla.mozilla.org/show_bug.cgi?id=350238X Refsource MISC
secunia.com/advisories/22980Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=354151X Refsource MISC
rhn.redhat.com/errata/RHSA-2006-0733.htmlVendor AdvisoryX Refsource REDHATPatch
secunia.com/advisories/24711Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23263Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/22763Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=352606X Refsource MISC
secunia.com/advisories/22965Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.ubuntu.com/usn/usn-382-1Vendor AdvisoryX Refsource UBUNTUPatch
www.kb.cert.org/vuls/id/390480Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
securitytracker.com/id?1017177VDB EntryX Refsource SECTRACKPatch
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
sunsolve.sun.com/search/document.do?assetkey=1-26-103139-1Vendor AdvisoryX Refsource SUNALERT
rhn.redhat.com/errata/RHSA-2006-0735.htmlVendor AdvisoryX Refsource REDHATPatch
www.novell.com/linux/security/advisories/2006_68_mozilla.htmlVendor AdvisoryX Refsource SUSEPatch
security.gentoo.org/glsa/glsa-200612-07.xmlVendor AdvisoryX Refsource GENTOOPatch
www.vupen.com/english/advisories/2007/1198VDB EntryX Refsource VUPEN
secunia.com/advisories/23297Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/22727Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22815Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2006-0734.htmlVendor AdvisoryX Refsource REDHATPatch
www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742Vendor AdvisoryX Refsource HP
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11408VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/22737Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22929Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=351973X Refsource MISC
secunia.com/advisories/23202Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
security.gentoo.org/glsa/glsa-200612-06.xmlVendor AdvisoryX Refsource GENTOOPatch
www.mandriva.com/security/advisories?name=MDKSA-2006:206Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/20957VDB EntryX Refsource BIDPatch
secunia.com/advisories/23197Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.debian.org/security/2006/dsa-1224Vendor AdvisoryX Refsource DEBIANPatch
www.vupen.com/english/advisories/2007/3821VDB EntryX Refsource VUPEN
secunia.com/advisories/22066Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=353165X Refsource MISC
secunia.com/advisories/22774Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22817Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22722Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=351116X Refsource MISC
www.mandriva.com/security/advisories?name=MDKSA-2006:205Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/23287Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-381-1Vendor AdvisoryX Refsource UBUNTUPatch
security-tracker.debian.org/tracker/CVE-2006-5748Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities