Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-6501

Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.

Published

2006-12-20T01:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mozilla	firefox	< 1.5.0.9	Yes
Application	mozilla	firefox	< 2.0.0.1	Yes
Application	mozilla	seamonkey	< 1.0.7	Yes
Application	mozilla	thunderbird	< 1.5.0.9	Yes
Operating System	debian	debian_linux	3.1	Yes
Operating System	debian	debian_linux	4.0	Yes
Operating System	canonical	ubuntu_linux	5.10	Yes
Operating System	canonical	ubuntu_linux	6.06	Yes
Operating System	canonical	ubuntu_linux	6.10	Yes

References

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc Broken Link ([email protected])
http://fedoranews.org/cms/node/2297 Broken Link ([email protected])
http://fedoranews.org/cms/node/2338 Broken Link ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link ([email protected])
http://rhn.redhat.com/errata/RHSA-2006-0758.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2006-0759.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2006-0760.html Third Party Advisory ([email protected])
http://secunia.com/advisories/23282 Third Party Advisory ([email protected])
http://secunia.com/advisories/23420 Third Party Advisory ([email protected])
http://secunia.com/advisories/23422 Third Party Advisory ([email protected])
http://secunia.com/advisories/23433 Third Party Advisory ([email protected])
http://secunia.com/advisories/23439 Third Party Advisory ([email protected])
http://secunia.com/advisories/23440 Third Party Advisory ([email protected])
http://secunia.com/advisories/23468 Third Party Advisory ([email protected])
http://secunia.com/advisories/23514 Third Party Advisory ([email protected])
http://secunia.com/advisories/23545 Third Party Advisory ([email protected])
http://secunia.com/advisories/23589 Third Party Advisory ([email protected])
http://secunia.com/advisories/23591 Third Party Advisory ([email protected])
http://secunia.com/advisories/23598 Third Party Advisory ([email protected])
http://secunia.com/advisories/23601 Third Party Advisory ([email protected])
http://secunia.com/advisories/23614 Third Party Advisory ([email protected])
http://secunia.com/advisories/23618 Third Party Advisory ([email protected])
http://secunia.com/advisories/23672 Third Party Advisory ([email protected])
http://secunia.com/advisories/23692 Third Party Advisory ([email protected])
http://secunia.com/advisories/23988 Third Party Advisory ([email protected])
http://secunia.com/advisories/24078 Third Party Advisory ([email protected])
http://secunia.com/advisories/24390 Third Party Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-200701-02.xml Third Party Advisory ([email protected])
http://securitytracker.com/id?1017403 Third Party Advisory, VDB Entry ([email protected])
http://securitytracker.com/id?1017404 Third Party Advisory, VDB Entry ([email protected])
http://securitytracker.com/id?1017407 Third Party Advisory, VDB Entry ([email protected])
http://www.debian.org/security/2007/dsa-1253 Third Party Advisory ([email protected])
http://www.debian.org/security/2007/dsa-1258 Third Party Advisory ([email protected])
http://www.debian.org/security/2007/dsa-1265 Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml Third Party Advisory ([email protected])
http://www.kb.cert.org/vuls/id/263412 Third Party Advisory, US Government Resource ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 Third Party Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2007:011 Third Party Advisory ([email protected])
http://www.mozilla.org/security/announce/2006/mfsa2006-70.html Vendor Advisory ([email protected])
http://www.novell.com/linux/security/advisories/2006_80_mozilla.html Broken Link ([email protected])
http://www.novell.com/linux/security/advisories/2007_06_mozilla.html Broken Link ([email protected])
http://www.securityfocus.com/archive/1/455145/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/455728/100/200/threaded ([email protected])
http://www.securityfocus.com/bid/21668 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/usn-398-1 Third Party Advisory ([email protected])
http://www.ubuntu.com/usn/usn-398-2 Third Party Advisory ([email protected])
http://www.ubuntu.com/usn/usn-400-1 Third Party Advisory ([email protected])
http://www.us-cert.gov/cas/techalerts/TA06-354A.html Third Party Advisory, US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2006/5068 Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/0083 Third Party Advisory ([email protected])
https://issues.rpath.com/browse/RPL-883 Broken Link ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9746 Third Party Advisory ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://fedoranews.org/cms/node/2297 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://fedoranews.org/cms/node/2338 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2006-0758.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2006-0759.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2006-0760.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23282 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23420 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23422 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23433 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23439 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23440 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23468 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23514 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23545 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23589 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23591 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23598 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23601 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23614 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23618 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23672 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23692 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23988 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24078 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24390 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200701-02.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017403 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017404 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017407 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2007/dsa-1253 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2007/dsa-1258 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2007/dsa-1265 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/263412 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2007:011 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/2006/mfsa2006-70.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_80_mozilla.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2007_06_mozilla.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/455145/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/455728/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/21668 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-398-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-398-2 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-400-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA06-354A.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/5068 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0083 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-883 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9746 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)