CVE-2006-6498

Published: Dec 20, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and Mozilla 1.7 and probably earlier on Solaris, allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown impact and attack vectors.

Affected (48)

Products: Mozilla: Firefox, Mozilla, Thunderbird, Seamonkey

4 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 2.0
Mozilla Mozilla	Version 1.7

Configuration B

30 vulnerable

Vulnerable Software	Affected Versions
Mozilla Thunderbird	Version 0.1
Mozilla Thunderbird	Version 0.2
Mozilla Thunderbird	Version 0.3
Mozilla Thunderbird	Version 0.4
Mozilla Thunderbird	Version 0.5
Mozilla Thunderbird	Version 0.6
Mozilla Thunderbird	Version 0.7.1
Mozilla Thunderbird	Version 0.7.2
Mozilla Thunderbird	Version 0.7.3
Mozilla Thunderbird	Version 0.7
Mozilla Thunderbird	Version 0.8
Mozilla Thunderbird	Version 0.9
Mozilla Thunderbird	Version 1.0.1
Mozilla Thunderbird	Version 1.0.2
Mozilla Thunderbird	Version 1.0.3
Mozilla Thunderbird	Version 1.0.4
Mozilla Thunderbird	Version 1.0.5
Mozilla Thunderbird	Version 1.0.6
Mozilla Thunderbird	Version 1.0.7
Mozilla Thunderbird	Version 1.0.8
Mozilla Thunderbird	Version 1.0
Mozilla Thunderbird	Version 1.5.0.1
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.3
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.0.5
Mozilla Thunderbird	Version 1.5.0.6
Mozilla Thunderbird	Version 1.5.0.7
Mozilla Thunderbird	Version 1.5.0.8
Mozilla Thunderbird	Version 1.5

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0

References (106)

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc (unsafe URL)

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2297

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2338

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0758.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2006-0759.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2006-0760.html

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23282

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23420

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23422

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23433

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23439

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23440

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23468

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23514

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23545

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23589

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23591

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23601

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23614

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23618

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23672

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23692

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23988

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24078

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24390

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25556

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200701-02.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1017398

Source: secalert@redhat.com

http://securitytracker.com/id?1017405

Source: secalert@redhat.com

http://securitytracker.com/id?1017406

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102955-1

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1253

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1258

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1265

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/427972

Source: secalert@redhat.com

US Government Resource

http://www.kb.cert.org/vuls/id/447772

Source: secalert@redhat.com

US Government Resource

http://www.mozilla.org/security/announce/2006/mfsa2006-68.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_80_mozilla.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_06_mozilla.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/455145/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/455728/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/21668

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-398-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-398-2

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-400-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA06-354A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2006/5068

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2106

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-883

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10661

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc (unsafe URL)