CVE-2006-6501

Published: Dec 20, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.

Affected (9)

Products: Mozilla: Firefox, Seamonkey, Thunderbird · Debian: Debian Linux · Canonical: Ubuntu Linux

3 products

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	From 1.5 to 1.5.0.9
Mozilla Firefox	From 2.0 to 2.0.0.1
Mozilla Seamonkey	Before 1.0.7
Mozilla Thunderbird	Before 1.5.0.9

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 5.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10

Related CWEs

CWE-264

References (106)

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2297

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2338

Source: secalert@redhat.com

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

Broken Link

http://rhn.redhat.com/errata/RHSA-2006-0758.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2006-0759.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2006-0760.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23282

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23420

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23422

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23433

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23439

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23440

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23468

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23514

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23545

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23589

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23591

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23598

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23601

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23614

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23618

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23672

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23692

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23988

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24078

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24390

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200701-02.xml

Source: secalert@redhat.com

Third Party Advisory

http://securitytracker.com/id?1017403

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://securitytracker.com/id?1017404

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://securitytracker.com/id?1017407

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.debian.org/security/2007/dsa-1253

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1258

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1265

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.kb.cert.org/vuls/id/263412

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:010

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:011

Source: secalert@redhat.com

Third Party Advisory

http://www.mozilla.org/security/announce/2006/mfsa2006-70.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_80_mozilla.html

Source: secalert@redhat.com

Broken Link

http://www.novell.com/linux/security/advisories/2007_06_mozilla.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/archive/1/455145/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/455728/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/21668

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-398-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/usn-398-2

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/usn-400-1

Source: secalert@redhat.com

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA06-354A.html

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2006/5068

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

Third Party Advisory

https://issues.rpath.com/browse/RPL-883

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9746

Source: secalert@redhat.com

Third Party Advisory

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc (unsafe URL)