CVE-2006-2777

Published: Jun 2, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.

Affected (25)

Products: Mozilla: Firefox, Seamonkey

Mozilla

2 products

Firefox

Seamonkey

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 1.5.0.3
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Seamonkey	Up to 1.0
Mozilla Seamonkey	Version 1.0

References (66)

http://secunia.com/advisories/20376

Source: cve@mitre.org

http://secunia.com/advisories/20394

Source: cve@mitre.org

http://secunia.com/advisories/20561

Source: cve@mitre.org

http://secunia.com/advisories/21176

Source: cve@mitre.org

http://secunia.com/advisories/21178

Source: cve@mitre.org

http://secunia.com/advisories/21183

Source: cve@mitre.org

http://secunia.com/advisories/21188

Source: cve@mitre.org

http://secunia.com/advisories/21324

Source: cve@mitre.org

http://secunia.com/advisories/21532

Source: cve@mitre.org

http://secunia.com/advisories/22066

Source: cve@mitre.org

http://securitytracker.com/id?1016202

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1118

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1120

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1134

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/237257

Source: cve@mitre.org

PatchUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2006/mfsa2006-43.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2006_35_mozilla.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/435795/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/446658/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18228

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-153A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/2106

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3748

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0058

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0083

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26853

Source: cve@mitre.org

https://usn.ubuntu.com/296-1/

Source: cve@mitre.org

https://usn.ubuntu.com/296-2/

Source: cve@mitre.org

https://usn.ubuntu.com/323-1/

Source: cve@mitre.org

http://secunia.com/advisories/20376