CVE-2006-1724
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla...
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.
Exploit likelihood
What each source reports
NVD Score used
7.5
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.
- Record
CVE-2006-1724- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.
- Record
CVE-2006-1724- Updated
- 2026-11-02
EUVDEUVD-2006-1724 No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.
- Record
EUVD-2006-1724- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8v22-vg6j-pf23 No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla...
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.
- Record
GHSA-8v22-vg6j-pf23- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.
- Record
CVE-2006-1724- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1724 No score
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.
- Record
DEBIAN-CVE-2006-1724- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 |
before 1.5.0.2-1 | 1.5.0.2-1 |
thunderbirdDebian:13 |
before 1.5.0.2-1 | 1.5.0.2-1 |
thunderbirdDebian:14 |
before 1.5.0.2-1 | 1.5.0.2-1 |
mozilla-firefoxDebian:3.1 From an advisory covering 23 CVEs |
before 1.0.4-2sarge6, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge21.0.4-2sarge31.0.4-2sarge41.0.4-2sarge5 |
1.0.4-2sarge6 |
mozillaDebian:3.1 From an advisory covering 31 CVEs |
before 2:1.7.8-1sarge5, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge3 |
2:1.7.8-1sarge5 |
mozilla-thunderbirdDebian:3.1 From an advisory covering 28 CVEs |
before 1.0.2-2.sarge1.0.8, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.7 |
1.0.2-2.sarge1.0.8 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 20 CVEs |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 21 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 21 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 21 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 21 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 21 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 21 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 21 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 21 CVEs |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1724 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published April 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.89%, the 94th percentile. Fixed in thunderbird 1.5.0.2-1.
References
mozilla.org/security/announce/2006/mfsa2006-20.html
vupen.com/english/advisories/2006/3748
redhat.com/support/errata/RHSA-2006-0330.html
securityfocus.com/archive/1/434524/100/0/threaded
secunia.com/advisories/19941
secunia.com/advisories/19780
Show 187 moreShow less
redhat.com/support/errata/RHSA-2006-0328.html
secunia.com/advisories/21622
support.avaya.com/elmodocs2/security/ASA-2006-205.htm
debian.org/security/2006/dsa-1051
redhat.com/archives/fedora-announce-list/2006-April/msg00153.html
vupen.com/english/advisories/2006/3749
secunia.com/advisories/19714
secunia.com/advisories/21033
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10243
kb.cert.org/vuls/id/350262
vupen.com/english/advisories/2008/0083
sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
secunia.com/advisories/19696
securityfocus.com/archive/1/436338/100/0/threaded
securityfocus.com/archive/1/446658/100/200/threaded
vupen.com/english/advisories/2006/1356
securityfocus.com/archive/1/446657/100/200/threaded
bugzilla.mozilla.org/show_bug.cgi?id=282105
securitytracker.com/id?1015921
secunia.com/advisories/19649
secunia.com/advisories/19863
us-cert.gov/cas/techalerts/TA06-107A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1901
securityfocus.com/bid/17516
securitytracker.com/id?1015919
sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
redhat.com/archives/fedora-announce-list/2006-April/msg00154.html
secunia.com/advisories/22066
securitytracker.com/id?1015920
secunia.com/advisories/22065
secunia.com/advisories/19631
debian.org/security/2006/dsa-1046
nvd.nist.gov/vuln/detail/CVE-2006-1724
github.com/advisories/GHSA-8v22-vg6j-pf23
security-tracker.debian.org/tracker/CVE-2006-1724
access.redhat.com/errata/RHSA-2006:0328
mozilla.com/firefox/releases/1.0.8.html
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=183537
bugzilla.redhat.com/show_bug.cgi?id=188814
bugzilla.redhat.com/show_bug.cgi?id=188816
bugzilla.redhat.com/show_bug.cgi?id=188818
bugzilla.redhat.com/show_bug.cgi?id=188820
bugzilla.redhat.com/show_bug.cgi?id=188822
bugzilla.redhat.com/show_bug.cgi?id=188824
bugzilla.redhat.com/show_bug.cgi?id=188826
bugzilla.redhat.com/show_bug.cgi?id=188828
bugzilla.redhat.com/show_bug.cgi?id=188830
bugzilla.redhat.com/show_bug.cgi?id=188832
bugzilla.redhat.com/show_bug.cgi?id=188834
bugzilla.redhat.com/show_bug.cgi?id=188836
bugzilla.redhat.com/show_bug.cgi?id=188838
bugzilla.redhat.com/show_bug.cgi?id=188840
bugzilla.redhat.com/show_bug.cgi?id=188842
bugzilla.redhat.com/show_bug.cgi?id=188844
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0328.json
access.redhat.com/security/cve/CVE-2006-0748
bugzilla.redhat.com/show_bug.cgi?id=1618020
cve.org/CVERecord?id=CVE-2006-0748
nvd.nist.gov/vuln/detail/CVE-2006-0748
access.redhat.com/security/cve/CVE-2006-0749
cve.org/CVERecord?id=CVE-2006-0749
nvd.nist.gov/vuln/detail/CVE-2006-0749
access.redhat.com/security/cve/CVE-2006-1724
bugzilla.redhat.com/show_bug.cgi?id=1618047
cve.org/CVERecord?id=CVE-2006-1724
access.redhat.com/security/cve/CVE-2006-1727
bugzilla.redhat.com/show_bug.cgi?id=1618048
cve.org/CVERecord?id=CVE-2006-1727
nvd.nist.gov/vuln/detail/CVE-2006-1727
access.redhat.com/security/cve/CVE-2006-1728
bugzilla.redhat.com/show_bug.cgi?id=1618049
cve.org/CVERecord?id=CVE-2006-1728
nvd.nist.gov/vuln/detail/CVE-2006-1728
access.redhat.com/security/cve/CVE-2006-1729
bugzilla.redhat.com/show_bug.cgi?id=1618050
cve.org/CVERecord?id=CVE-2006-1729
nvd.nist.gov/vuln/detail/CVE-2006-1729
access.redhat.com/security/cve/CVE-2006-1730
bugzilla.redhat.com/show_bug.cgi?id=1618051
cve.org/CVERecord?id=CVE-2006-1730
nvd.nist.gov/vuln/detail/CVE-2006-1730
access.redhat.com/security/cve/CVE-2006-1731
bugzilla.redhat.com/show_bug.cgi?id=1618052
cve.org/CVERecord?id=CVE-2006-1731
nvd.nist.gov/vuln/detail/CVE-2006-1731
access.redhat.com/security/cve/CVE-2006-1732
bugzilla.redhat.com/show_bug.cgi?id=1618053
cve.org/CVERecord?id=CVE-2006-1732
nvd.nist.gov/vuln/detail/CVE-2006-1732
access.redhat.com/security/cve/CVE-2006-1733
bugzilla.redhat.com/show_bug.cgi?id=1618054
cve.org/CVERecord?id=CVE-2006-1733
nvd.nist.gov/vuln/detail/CVE-2006-1733
access.redhat.com/security/cve/CVE-2006-1734
bugzilla.redhat.com/show_bug.cgi?id=1618055
cve.org/CVERecord?id=CVE-2006-1734
nvd.nist.gov/vuln/detail/CVE-2006-1734
access.redhat.com/security/cve/CVE-2006-1735
bugzilla.redhat.com/show_bug.cgi?id=1618056
cve.org/CVERecord?id=CVE-2006-1735
nvd.nist.gov/vuln/detail/CVE-2006-1735
access.redhat.com/security/cve/CVE-2006-1737
bugzilla.redhat.com/show_bug.cgi?id=1618057
cve.org/CVERecord?id=CVE-2006-1737
nvd.nist.gov/vuln/detail/CVE-2006-1737
access.redhat.com/security/cve/CVE-2006-1738
bugzilla.redhat.com/show_bug.cgi?id=1618058
cve.org/CVERecord?id=CVE-2006-1738
nvd.nist.gov/vuln/detail/CVE-2006-1738
access.redhat.com/security/cve/CVE-2006-1739
bugzilla.redhat.com/show_bug.cgi?id=1618059
cve.org/CVERecord?id=CVE-2006-1739
nvd.nist.gov/vuln/detail/CVE-2006-1739
access.redhat.com/security/cve/CVE-2006-1740
bugzilla.redhat.com/show_bug.cgi?id=1618060
cve.org/CVERecord?id=CVE-2006-1740
nvd.nist.gov/vuln/detail/CVE-2006-1740
access.redhat.com/security/cve/CVE-2006-1741
bugzilla.redhat.com/show_bug.cgi?id=1618061
cve.org/CVERecord?id=CVE-2006-1741
nvd.nist.gov/vuln/detail/CVE-2006-1741
access.redhat.com/security/cve/CVE-2006-1742
bugzilla.redhat.com/show_bug.cgi?id=1618062
cve.org/CVERecord?id=CVE-2006-1742
nvd.nist.gov/vuln/detail/CVE-2006-1742
access.redhat.com/security/cve/CVE-2006-1790
bugzilla.redhat.com/show_bug.cgi?id=1618063
cve.org/CVERecord?id=CVE-2006-1790
nvd.nist.gov/vuln/detail/CVE-2006-1790
access.redhat.com/errata/RHSA-2006:0329
access.redhat.com/security/updates/classification
mozilla.org/projects/security/known-vulnerabilities.html
bugzilla.redhat.com/show_bug.cgi?id=188776
bugzilla.redhat.com/show_bug.cgi?id=188778
bugzilla.redhat.com/show_bug.cgi?id=188780
bugzilla.redhat.com/show_bug.cgi?id=188782
bugzilla.redhat.com/show_bug.cgi?id=188784
bugzilla.redhat.com/show_bug.cgi?id=188787
bugzilla.redhat.com/show_bug.cgi?id=188789
bugzilla.redhat.com/show_bug.cgi?id=188791
bugzilla.redhat.com/show_bug.cgi?id=188793
bugzilla.redhat.com/show_bug.cgi?id=188795
bugzilla.redhat.com/show_bug.cgi?id=188799
bugzilla.redhat.com/show_bug.cgi?id=188801
bugzilla.redhat.com/show_bug.cgi?id=188803
bugzilla.redhat.com/show_bug.cgi?id=188805
bugzilla.redhat.com/show_bug.cgi?id=188807
bugzilla.redhat.com/show_bug.cgi?id=188810
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0329.json
access.redhat.com/security/cve/CVE-2006-0884
bugzilla.redhat.com/show_bug.cgi?id=1618021
cve.org/CVERecord?id=CVE-2006-0884
nvd.nist.gov/vuln/detail/CVE-2006-0884
access.redhat.com/errata/RHSA-2006:0330
mozilla.org/projects/security/known-
bugzilla.redhat.com/show_bug.cgi?id=188848
bugzilla.redhat.com/show_bug.cgi?id=188850
bugzilla.redhat.com/show_bug.cgi?id=188852
bugzilla.redhat.com/show_bug.cgi?id=188855
bugzilla.redhat.com/show_bug.cgi?id=188857
bugzilla.redhat.com/show_bug.cgi?id=188859
bugzilla.redhat.com/show_bug.cgi?id=188861
bugzilla.redhat.com/show_bug.cgi?id=188863
bugzilla.redhat.com/show_bug.cgi?id=188865
bugzilla.redhat.com/show_bug.cgi?id=188867
bugzilla.redhat.com/show_bug.cgi?id=188869
bugzilla.redhat.com/show_bug.cgi?id=188871
bugzilla.redhat.com/show_bug.cgi?id=188873
bugzilla.redhat.com/show_bug.cgi?id=188875
bugzilla.redhat.com/show_bug.cgi?id=188877
bugzilla.redhat.com/show_bug.cgi?id=188879
bugzilla.redhat.com/show_bug.cgi?id=189180
bugzilla.redhat.com/show_bug.cgi?id=189181
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0330.json
access.redhat.com/security/cve/CVE-2006-0292
bugzilla.redhat.com/show_bug.cgi?id=1617879
cve.org/CVERecord?id=CVE-2006-0292
nvd.nist.gov/vuln/detail/CVE-2006-0292
access.redhat.com/security/cve/CVE-2006-0296
bugzilla.redhat.com/show_bug.cgi?id=1617880
cve.org/CVERecord?id=CVE-2006-0296
nvd.nist.gov/vuln/detail/CVE-2006-0296
access.redhat.com/security/cve/CVE-2006-1045
bugzilla.redhat.com/show_bug.cgi?id=1618023
cve.org/CVERecord?id=CVE-2006-1045
nvd.nist.gov/vuln/detail/CVE-2006-1045