CVE-2006-4571
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.78%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 5.78% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- mozilla/seamonkey · mozilla/thunderbird
- Source
- secalert@redhat.com
References
- ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
- http://secunia.com/advisories/21906Patch, Vendor Advisory
- http://secunia.com/advisories/21915Vendor Advisory
- http://secunia.com/advisories/21916Vendor Advisory
- http://secunia.com/advisories/21939Vendor Advisory
- http://secunia.com/advisories/21940Vendor Advisory
- http://secunia.com/advisories/21949Patch, Vendor Advisory
- http://secunia.com/advisories/21950Vendor Advisory
- http://secunia.com/advisories/22001Vendor Advisory
- http://secunia.com/advisories/22025Vendor Advisory
- http://secunia.com/advisories/22036Vendor Advisory
- http://secunia.com/advisories/22055Vendor Advisory
- http://secunia.com/advisories/22056Vendor Advisory
- http://secunia.com/advisories/22066
- http://secunia.com/advisories/22074Vendor Advisory
- http://secunia.com/advisories/22088
- http://secunia.com/advisories/22195Vendor Advisory
- http://secunia.com/advisories/22210Vendor Advisory
- http://secunia.com/advisories/22247Vendor Advisory
- http://secunia.com/advisories/22274Vendor Advisory
- http://secunia.com/advisories/22299Vendor Advisory
- http://secunia.com/advisories/22342Vendor Advisory
- http://secunia.com/advisories/22391Vendor Advisory
- http://secunia.com/advisories/22422Vendor Advisory
- http://secunia.com/advisories/22849Vendor Advisory
- http://secunia.com/advisories/24711
- http://security.gentoo.org/glsa/glsa-200609-19.xml
- http://security.gentoo.org/glsa/glsa-200610-01.xml
- http://security.gentoo.org/glsa/glsa-200610-04.xml
- http://securitytracker.com/id?1016846
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.