cbcvebase.
CVE-2006-3803
published 2006-07-27

CVE-2006-3803: Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow…

PriorityP424medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EPSS
4.38%
90.1th percentile
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianfirefox< firefox 1.5.dfsg+1.5.0.5-1 (sid)firefox 1.5.dfsg+1.5.0.5-1 (sid)
debianthunderbird< firefox 1.5.dfsg+1.5.0.5-1 (sid)firefox 1.5.dfsg+1.5.0.5-1 (sid)
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillaseamonkey
mozillaseamonkey
mozillaseamonkey
mozillathunderbird
mozillathunderbird
mozillathunderbird
mozillathunderbird>= 0 < 1.5.0.5-11.5.0.5-1
mozillathunderbird>= 0 < 1.5.0.5-11.5.0.5-1
mozillathunderbird>= 0 < 1.5.0.5-11.5.0.5-1
mozillathunderbird>= 0 < 1.5.0.5-11.5.0.5-1

CVSS provenance

nvdv2.05.1MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
osv5.1MEDIUM
vendor_ubuntu7.5HIGH
vendor_debian5.1HIGH
vendor_redhat5.1MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.