Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-3677

Fixed in a distro release EPSS 79%

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.

Published 2006-07-27 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 3seamonkey0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-chat0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-debuginfo0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-devel0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-dom-inspector0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-js-debugger0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-mail0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-nspr0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-nspr-devel0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-nss0:1.0.3-0.el3.1
Red Hat Enterprise Linux 3seamonkey-nss-devel0:1.0.3-0.el3.1
Red Hat Enterprise Linux 4devhelp0:0.10-0.2.el4
Red Hat Enterprise Linux 4devhelp-debuginfo0:0.10-0.2.el4
Red Hat Enterprise Linux 4devhelp-devel0:0.10-0.2.el4
Red Hat Enterprise Linux 4firefox0:1.5.0.5-0.el4.1
Red Hat Enterprise Linux 4firefox-debuginfo0:1.5.0.5-0.el4.1
Red Hat Enterprise Linux 4seamonkey0:1.0.3-0.el4.1
Red Hat Enterprise Linux 4seamonkey-chat0:1.0.3-0.el4.1
Red Hat Enterprise Linux 4seamonkey-debuginfo0:1.0.3-0.el4.1
Red Hat Enterprise Linux 4seamonkey-devel0:1.0.3-0.el4.1
Red Hat Enterprise Linux 4seamonkey-dom-inspector0:1.0.3-0.el4.1
Red Hat Enterprise Linux 4seamonkey-js-debugger0:1.0.3-0.el4.1
Red Hat Enterprise Linux 4seamonkey-mail0:1.0.3-0.el4.1
Red Hat Enterprise Linux 4thunderbird0:1.5.0.5-0.el4.1
Red Hat Enterprise Linux 4thunderbird-debuginfo0:1.5.0.5-0.el4.1