{"schemaVersion":3,"id":"CVE-2006-6499","aliases":["DEBIAN-CVE-2006-6499"],"status":"published","duplicateOf":null,"title":null,"description":"The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.","dates":{"published":"2006-12-20T01:00:00.000Z","modified":"2024-08-07T20:26:46.595Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03939,"percentile":0.90272,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03939},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03838,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03838,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03838,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03939,"percentile":0.90272}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03939,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03939,"percentile":0.90272}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-835","name":"Loop with Unreachable Exit Condition ('Infinite Loop')","description":"The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/835.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.10","noFixRecorded":false,"fixedIn":null},{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"6.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.10 | 6.06 | 6.10","eol":{"isEol":true,"eolDate":"2007-04-13T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5.10","label":"5.10 'Breezy Badger'","eolFrom":"2007-04-13T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"5.10"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"firefox-esr","name":"firefox-esr","label":"firefox-esr","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/firefox-esr","purlType":"deb","versions":[{"text":"< 45.0esr-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.0esr-1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"3.1","noFixRecorded":false,"fixedIn":null},{"text":"4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.1 | 4.0","eol":{"isEol":true,"eolDate":"2008-03-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"3.1","label":"3.1 (Sarge)","eolFrom":"2008-03-31T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"3.1r8"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.5, < 1.5.0.9","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0, < 2.0.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.5, < 1.5.0.9 | ≥ 2.0, < 2.0.0.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.7","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.5.0.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0.9","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":6,"eol":{"hasEol":true,"count":2},"references":[{"url":"http://www.securityfocus.com/bid/21668","label":"www.securityfocus.com/bid/21668","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23672","label":"secunia.com/advisories/23672","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2006/5068","label":"www.vupen.com/english/advisories/2006/5068","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1017398","label":"securitytracker.com/id?1017398","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://www.debian.org/security/2007/dsa-1265","label":"www.debian.org/security/2007/dsa-1265","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/24078","label":"secunia.com/advisories/24078","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://secunia.com/advisories/23692","label":"secunia.com/advisories/23692","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-398-2","label":"www.ubuntu.com/usn/usn-398-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml","label":"www.gentoo.org/security/en/glsa/glsa-200701-04.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23282","label":"secunia.com/advisories/23282","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://secunia.com/advisories/24390","label":"secunia.com/advisories/24390","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-68.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-68.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23422","label":"secunia.com/advisories/23422","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742","label":"h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742","hostname":"h20000.www2.hp.com","tags":["Vendor Advisory","X Refsource HP","Broken Link"]},{"url":"http://secunia.com/advisories/23591","label":"secunia.com/advisories/23591","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2007/1124","label":"www.vupen.com/english/advisories/2007/1124","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1017405","label":"securitytracker.com/id?1017405","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23614","label":"secunia.com/advisories/23614","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://securitytracker.com/id?1017406","label":"securitytracker.com/id?1017406","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-398-1","label":"www.ubuntu.com/usn/usn-398-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23420","label":"secunia.com/advisories/23420","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2006_80_mozilla.html","label":"www.novell.com/linux/security/advisories/2006_80_mozilla.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/427972","label":"www.kb.cert.org/vuls/id/427972","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://secunia.com/advisories/23545","label":"secunia.com/advisories/23545","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102846-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-102846-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-354A.html","label":"www.us-cert.gov/cas/techalerts/TA06-354A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","Broken Link","US Government Resource"]},{"url":"http://secunia.com/advisories/23589","label":"secunia.com/advisories/23589","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.debian.org/security/2007/dsa-1253","label":"www.debian.org/security/2007/dsa-1253","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.debian.org/security/2007/dsa-1258","label":"www.debian.org/security/2007/dsa-1258","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2007_06_mozilla.html","label":"www.novell.com/linux/security/advisories/2007_06_mozilla.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"http://secunia.com/advisories/23988","label":"secunia.com/advisories/23988","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200701-02.xml","label":"security.gentoo.org/glsa/glsa-200701-02.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Broken Link","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-400-1","label":"www.ubuntu.com/usn/usn-400-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-6499","label":"security-tracker.debian.org/tracker/CVE-2006-6499","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1253-1","DSA-1258-1","DSA-1265-1"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-12-20T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T20:26:46.595Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:41:49.507Z","stale":false,"partial":false}}