CVE-2006-1723
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1,...
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
- Record
CVE-2006-1723- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
- Record
CVE-2006-1723- Updated
- 2026-11-02
EUVDEUVD-2006-1723 No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
- Record
EUVD-2006-1723- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vxpf-8467-g5rj No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1,...
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
- Record
GHSA-vxpf-8467-g5rj- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
- Record
CVE-2006-1723- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1723 No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
- Record
DEBIAN-CVE-2006-1723- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 |
before 1.5.0.2-1 | 1.5.0.2-1 |
thunderbirdDebian:13 |
before 1.5.0.2-1 | 1.5.0.2-1 |
thunderbirdDebian:14 |
before 1.5.0.2-1 | 1.5.0.2-1 |
mozillaDebian:3.1 From an advisory covering 31 CVEs |
before 2:1.7.8-1sarge5, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge3 |
2:1.7.8-1sarge5 |
mozilla-thunderbirdDebian:3.1 From an advisory covering 28 CVEs |
before 1.0.2-2.sarge1.0.8, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.7 |
1.0.2-2.sarge1.0.8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1723 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published April 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.80%, the 92nd percentile. Fixed in thunderbird 1.5.0.2-1.
References
mozilla.org/security/announce/2006/mfsa2006-20.html
vupen.com/english/advisories/2006/3748
secunia.com/advisories/19941
debian.org/security/2006/dsa-1051
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1574
Show 19 moreShow less
kb.cert.org/vuls/id/350262
securityfocus.com/archive/1/446658/100/200/threaded
securitytracker.com/id?1015921
nvd.nist.gov/vuln/detail/CVE-2006-1723
github.com/advisories/GHSA-vxpf-8467-g5rj
security-tracker.debian.org/tracker/CVE-2006-1723