{"schemaVersion":3,"id":"CVE-2006-6501","aliases":["DEBIAN-CVE-2006-6501"],"status":"published","duplicateOf":null,"title":null,"description":"Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.","dates":{"published":"2006-12-20T01:00:00.000Z","modified":"2024-08-07T20:26:46.562Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02997,"percentile":0.87176,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.02997},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0292,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0292,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0292,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02997,"percentile":0.87176}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02997,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02997,"percentile":0.87176}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-264","name":"Permissions, Privileges, and Access Controls","description":"Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.","type":"category","status":"Obsolete","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/264.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.10","noFixRecorded":false,"fixedIn":null},{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"6.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.10 | 6.06 | 6.10","eol":{"isEol":true,"eolDate":"2007-04-13T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5.10","label":"5.10 'Breezy Badger'","eolFrom":"2007-04-13T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"5.10"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"firefox-esr","name":"firefox-esr","label":"firefox-esr","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/firefox-esr","purlType":"deb","versions":[{"text":"< 45.0esr-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.0esr-1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"3.1","noFixRecorded":false,"fixedIn":null},{"text":"4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.1 | 4.0","eol":{"isEol":true,"eolDate":"2008-03-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"3.1","label":"3.1 (Sarge)","eolFrom":"2008-03-31T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"3.1r8"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.5, < 1.5.0.9","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0, < 2.0.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.5, < 1.5.0.9 | ≥ 2.0, < 2.0.0.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.7","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.5.0.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0.9","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":6,"eol":{"hasEol":true,"count":2},"references":[{"url":"http://www.securityfocus.com/bid/21668","label":"www.securityfocus.com/bid/21668","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23433","label":"secunia.com/advisories/23433","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:010","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:010","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23439","label":"secunia.com/advisories/23439","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23672","label":"secunia.com/advisories/23672","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/5068","label":"www.vupen.com/english/advisories/2006/5068","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23468","label":"secunia.com/advisories/23468","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23598","label":"secunia.com/advisories/23598","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0758.html","label":"rhn.redhat.com/errata/RHSA-2006-0758.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.debian.org/security/2007/dsa-1265","label":"www.debian.org/security/2007/dsa-1265","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/24078","label":"secunia.com/advisories/24078","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23692","label":"secunia.com/advisories/23692","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-398-2","label":"www.ubuntu.com/usn/usn-398-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml","label":"www.gentoo.org/security/en/glsa/glsa-200701-04.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23282","label":"secunia.com/advisories/23282","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/24390","label":"secunia.com/advisories/24390","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.kb.cert.org/vuls/id/263412","label":"www.kb.cert.org/vuls/id/263412","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://fedoranews.org/cms/node/2297","label":"fedoranews.org/cms/node/2297","hostname":"fedoranews.org","tags":["Vendor Advisory","X Refsource FEDORA","Broken Link"]},{"url":"http://secunia.com/advisories/23422","label":"secunia.com/advisories/23422","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742","label":"h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742","hostname":"h20000.www2.hp.com","tags":["Vendor Advisory","X Refsource HP","Broken Link"]},{"url":"http://secunia.com/advisories/23591","label":"secunia.com/advisories/23591","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23614","label":"secunia.com/advisories/23614","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0759.html","label":"rhn.redhat.com/errata/RHSA-2006-0759.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-398-1","label":"www.ubuntu.com/usn/usn-398-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1017404","label":"securitytracker.com/id?1017404","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://fedoranews.org/cms/node/2338","label":"fedoranews.org/cms/node/2338","hostname":"fedoranews.org","tags":["Vendor Advisory","X Refsource FEDORA","Broken Link"]},{"url":"http://secunia.com/advisories/23420","label":"secunia.com/advisories/23420","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23440","label":"secunia.com/advisories/23440","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1017403","label":"securitytracker.com/id?1017403","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_80_mozilla.html","label":"www.novell.com/linux/security/advisories/2006_80_mozilla.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9746","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9746","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/455145/100/0/threaded","label":"www.securityfocus.com/archive/1/455145/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/23545","label":"secunia.com/advisories/23545","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23618","label":"secunia.com/advisories/23618","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml","label":"www.gentoo.org/security/en/glsa/glsa-200701-03.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1017407","label":"securitytracker.com/id?1017407","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-354A.html","label":"www.us-cert.gov/cas/techalerts/TA06-354A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-70.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-70.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23589","label":"secunia.com/advisories/23589","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2007/dsa-1253","label":"www.debian.org/security/2007/dsa-1253","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.debian.org/security/2007/dsa-1258","label":"www.debian.org/security/2007/dsa-1258","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-883","label":"issues.rpath.com/browse/RPL-883","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/455728/100/200/threaded","label":"www.securityfocus.com/archive/1/455728/100/200/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.novell.com/linux/security/advisories/2007_06_mozilla.html","label":"www.novell.com/linux/security/advisories/2007_06_mozilla.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"http://secunia.com/advisories/23601","label":"secunia.com/advisories/23601","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23988","label":"secunia.com/advisories/23988","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:011","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:011","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23514","label":"secunia.com/advisories/23514","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://security.gentoo.org/glsa/glsa-200701-02.xml","label":"security.gentoo.org/glsa/glsa-200701-02.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0760.html","label":"rhn.redhat.com/errata/RHSA-2006-0760.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-400-1","label":"www.ubuntu.com/usn/usn-400-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-6501","label":"security-tracker.debian.org/tracker/CVE-2006-6501","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1253-1","DSA-1258-1","DSA-1265-1","RHSA-2006:0758","RHSA-2006:0759","RHSA-2006:0760"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-12-20T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T20:26:46.562Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:57:41.420Z","stale":false,"partial":false}}