CVE-2006-3677

Published: Jul 27, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.

Affected (9)

Products: Mozilla: Firefox, Seamonkey

Mozilla

2 products

Firefox

Seamonkey

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0

Related CWEs

CWE-16

References (94)

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2006-0609.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19873

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21216

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21229

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21243

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21246

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21262

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21269

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21270

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21336

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21343

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21361

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21529

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21532

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21631

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22066

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22210

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200608-02.xml

Source: cve@mitre.org

http://securitytracker.com/id?1016586

Source: cve@mitre.org

http://securitytracker.com/id?1016587

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/670060

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:143

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:145

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2006/mfsa2006-45.html

Source: cve@mitre.org

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0594.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2006-0608.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2006-0610.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2006-0611.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/441332/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/441333/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/446658/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19181

Source: cve@mitre.org

http://www.securityfocus.com/bid/19192

Source: cve@mitre.org

Patch

http://www.ubuntu.com/usn/usn-354-1

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-208A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/2998

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3748

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2008/0083

Source: cve@mitre.org

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-06-025.html

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/27981

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39998

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-536

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745

Source: cve@mitre.org

https://usn.ubuntu.com/327-1/

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)