Vulnerability Details : CVE-2006-6501
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.
Products affected by CVE-2006-6501
- cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
Threat overview for CVE-2006-6501
Top countries where our scanners detected CVE-2006-6501
Top open port discovered on systems with this issue
5555
IPs affected by CVE-2006-6501 121
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2006-6501!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2006-6501
52.56%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-6501
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
CWE ids for CVE-2006-6501
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2006-6501
-
http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml
SeaMonkey: Multiple vulnerabilities (GLSA 200701-04) — Gentoo securityThird Party Advisory
-
http://www.mozilla.org/security/announce/2006/mfsa2006-70.html
Privilege escalation using watch point — MozillaVendor Advisory
-
http://www.novell.com/linux/security/advisories/2007_06_mozilla.html
404 Page Not Found | SUSEBroken Link
-
http://securitytracker.com/id?1017404
Access DeniedThird Party Advisory;VDB Entry
-
http://www.debian.org/security/2007/dsa-1258
Debian -- Security Information -- DSA-1258-1 mozilla-thunderbirdThird Party Advisory
-
http://www.us-cert.gov/cas/techalerts/TA06-354A.html
Page Not Found | CISAThird Party Advisory;US Government Resource
-
http://fedoranews.org/cms/node/2297
404 Not FoundBroken Link
-
http://www.novell.com/linux/security/advisories/2006_80_mozilla.html
404 Page Not Found | SUSEBroken Link
-
http://www.vupen.com/english/advisories/2008/0083
Webmail: access your OVH emails on ovhcloud.com | OVHcloudThird Party Advisory
-
http://securitytracker.com/id?1017403
GoDaddy Domain Name SearchThird Party Advisory;VDB Entry
-
http://securitytracker.com/id?1017407
Access DeniedThird Party Advisory;VDB Entry
-
http://www.securityfocus.com/archive/1/455145/100/0/threaded
-
http://rhn.redhat.com/errata/RHSA-2006-0759.html
RHSA-2006:0759 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://security.gentoo.org/glsa/glsa-200701-02.xml
Mozilla Firefox: Multiple vulnerabilities (GLSA 200701-02) — Gentoo securityThird Party Advisory
-
http://www.kb.cert.org/vuls/id/263412
VU#263412 - Mozilla products vulnerable to privilege escalation via a JavaScript watch() functionThird Party Advisory;US Government Resource
-
http://www.debian.org/security/2007/dsa-1253
Debian -- Security Information -- DSA-1253-1 mozilla-firefoxThird Party Advisory
-
http://www.mandriva.com/security/advisories?name=MDKSA-2007:011
MandrivaThird Party Advisory
-
https://issues.rpath.com/browse/RPL-883
Broken Link
-
http://www.ubuntu.com/usn/usn-398-1
USN-398-1: Firefox vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2006-0758.html
RHSA-2006:0758 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2006-0760.html
RHSA-2006:0760 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://www.ubuntu.com/usn/usn-400-1
USN-400-1: Thunderbird vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
-
http://www.securityfocus.com/bid/21668
Third Party Advisory;VDB Entry
-
http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml
Mozilla Thunderbird: Multiple vulnerabilities (GLSA 200701-03) — Gentoo securityThird Party Advisory
-
ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc
Broken Link
-
http://www.vupen.com/english/advisories/2006/5068
Webmail: access your OVH emails on ovhcloud.com | OVHcloudThird Party Advisory
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9746
404 Not FoundThird Party Advisory
-
http://www.debian.org/security/2007/dsa-1265
Debian -- Security Information -- DSA-1265-1 mozillaThird Party Advisory
-
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Broken Link
-
http://www.mandriva.com/security/advisories?name=MDKSA-2007:010
MandrivaThird Party Advisory
-
http://www.ubuntu.com/usn/usn-398-2
USN-398-2: Firefox vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
-
http://www.securityfocus.com/archive/1/455728/100/200/threaded
-
http://fedoranews.org/cms/node/2338
404 Not FoundBroken Link
Jump to