CVE-2006-2777 — Firefox vulnerability

13 documents5 sources
Severity
7.5HIGHNVD
EPSS
35.1%
top 2.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Debian FirefoxMozilla FirefoxMozilla Seamonkey
Timeline
PublishedJun 2
Latest updateMay 1

Description

Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

▶NVDmozilla/firefox1.5.0.3+18
▶debiandebian/firefox< firefox 1.5.dfsg+1.5.0.4-1 (sid)

Patches

Patch: www.kb.cert.org ↗Patch: www.mozilla.org ↗Patch: www.kb.cert.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-5w8p-847h-44hj: Unspecified vulnerability in Mozilla Firefox before 1↗2022-05-01
▶

📋Vendor Advisories

4
Ubuntu
mozilla vulnerabilities↗2006-07-26
▶
Ubuntu
Firefox vulnerabilities↗2006-07-25
▶
Ubuntu
firefox vulnerabilities↗2006-06-09
▶
Debian
CVE-2006-2777: firefox - Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before...↗2006
▶

💬Community

7
Bugzilla
CVE-2006-2777 Seamonkey Privilege escalation using addSelectionListener↗2006-07-14
▶
Bugzilla
CVE-2006-2783 multiple Seamonkey issues (CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)↗2006-07-12
▶
Bugzilla
CVE-2006-2779 multiple Thunderbird issues (CVE-2006-2780, CVE-2006-2781, CVE-2006-2783,CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)↗2006-06-28
▶
Bugzilla
CVE-2006-2783 multiple Seamonkey issues (CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)↗2006-06-27
▶
Bugzilla
CVE-2006-2783 multiple Seamonkey issues (CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)↗2006-06-27
▶