CVE-2006-6497: mozilla firefox

CVSS: 6.8v2.0MediumModified

AliasesDEBIAN-CVE-2006-6497

Published 20-12-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-6497 is a medium (CVSS 6.8) vulnerability in mozilla firefox. EPSS estimates a 4.44% chance of exploitation in the next 30 days, higher than 91.2% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

4.44%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

DSA-1253-1 DSA-1258-1 DSA-1265-1 RHSA-2006:0758 RHSA-2006:0759 RHSA-2006:0760

Timeline

20-12-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

4.44%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.44% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla3 products

firefox≤ 1.5.0.8 | 2.0
seamonkey≤ 1.5.0.8
thunderbird≤ 1.5.0.8

Debian1 product

firefox-esr< 45.0esr-1

2 vendors · 4 products

References

57 links

www.kb.cert.org/vuls/id/606260Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securityfocus.com/bid/21668VDB EntryX Refsource BID
secunia.com/advisories/23433Third Party AdvisoryX Refsource SECUNIAVendor Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-102885-1Vendor AdvisoryX Refsource SUNALERT
www.mandriva.com/security/advisories?name=MDKSA-2007:010Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/24948Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23439Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23672Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2006/5068VDB EntryX Refsource VUPEN
secunia.com/advisories/23468Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 57 references

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11691VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/23598Third Party AdvisoryX Refsource SECUNIAVendor Advisory
rhn.redhat.com/errata/RHSA-2006-0758.htmlVendor AdvisoryX Refsource REDHAT
securitytracker.com/id?1017398VDB EntryX Refsource SECTRACK
www.debian.org/security/2007/dsa-1265Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/24078Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23692Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-398-2Vendor AdvisoryX Refsource UBUNTU
www.gentoo.org/security/en/glsa/glsa-200701-04.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/23282Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/24390Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mozilla.org/security/announce/2006/mfsa2006-68.htmlX Refsource CONFIRMVendor Advisory
fedoranews.org/cms/node/2297Vendor AdvisoryX Refsource FEDORA
secunia.com/advisories/23422Third Party AdvisoryX Refsource SECUNIAVendor Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742Vendor AdvisoryX Refsource HP
secunia.com/advisories/23591Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1017405VDB EntryX Refsource SECTRACK
secunia.com/advisories/23614Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1017406VDB EntryX Refsource SECTRACK
rhn.redhat.com/errata/RHSA-2006-0759.htmlVendor AdvisoryX Refsource REDHAT
www.ubuntu.com/usn/usn-398-1Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
fedoranews.org/cms/node/2338Vendor AdvisoryX Refsource FEDORA
secunia.com/advisories/23420Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23440Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2006_80_mozilla.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/archive/1/455145/100/0/threadedMailing ListX Refsource BUGTRAQ
www.kb.cert.org/vuls/id/427972Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/23545Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23618Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200701-03.xmlVendor AdvisoryX Refsource GENTOO
www.us-cert.gov/cas/techalerts/TA06-354A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/23589Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2007/dsa-1253Vendor AdvisoryX Refsource DEBIAN
www.debian.org/security/2007/dsa-1258Vendor AdvisoryX Refsource DEBIAN
issues.rpath.com/browse/RPL-883X Refsource CONFIRM
www.securityfocus.com/archive/1/455728/100/200/threadedMailing ListX Refsource BUGTRAQ
www.novell.com/linux/security/advisories/2007_06_mozilla.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/23601Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23988Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:011Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2007/1463VDB EntryX Refsource VUPEN
secunia.com/advisories/23514Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security.gentoo.org/glsa/glsa-200701-02.xmlVendor AdvisoryX Refsource GENTOO
rhn.redhat.com/errata/RHSA-2006-0760.htmlVendor AdvisoryX Refsource REDHAT
www.ubuntu.com/usn/usn-400-1Vendor AdvisoryX Refsource UBUNTU
security-tracker.debian.org/tracker/CVE-2006-6497Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities