CVE-2006-6498
Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and Mozilla 1.7 and probably earlier on Solaris, allow remote attackers to…
Does this matter?
Lower severity and a low EPSS score (4.32%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and Mozilla 1.7 and probably earlier on Solaris, allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown impact and attack vectors.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 4.32% probability · 91th percentile
- CISA KEV
- Not listed
- Affected
- mozilla/firefox · mozilla/mozilla · mozilla/thunderbird · mozilla/seamonkey
- Source
- secalert@redhat.com
References
- ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc
- http://fedoranews.org/cms/node/2297
- http://fedoranews.org/cms/node/2338
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://rhn.redhat.com/errata/RHSA-2006-0758.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2006-0759.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2006-0760.htmlVendor Advisory
- http://secunia.com/advisories/23282Vendor Advisory
- http://secunia.com/advisories/23420Vendor Advisory
- http://secunia.com/advisories/23422Vendor Advisory
- http://secunia.com/advisories/23433Vendor Advisory
- http://secunia.com/advisories/23439Vendor Advisory
- http://secunia.com/advisories/23440Vendor Advisory
- http://secunia.com/advisories/23468Vendor Advisory
- http://secunia.com/advisories/23514Vendor Advisory
- http://secunia.com/advisories/23545Vendor Advisory
- http://secunia.com/advisories/23589Vendor Advisory
- http://secunia.com/advisories/23591Vendor Advisory
- http://secunia.com/advisories/23601Vendor Advisory
- http://secunia.com/advisories/23614Vendor Advisory
- http://secunia.com/advisories/23618Vendor Advisory
- http://secunia.com/advisories/23672Vendor Advisory
- http://secunia.com/advisories/23692Vendor Advisory
- http://secunia.com/advisories/23988Vendor Advisory
- http://secunia.com/advisories/24078Vendor Advisory
- http://secunia.com/advisories/24390Vendor Advisory
- http://secunia.com/advisories/25556Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200701-02.xml
- http://securitytracker.com/id?1017398
- http://securitytracker.com/id?1017405
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.