CVE-2006-1742
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8,...
5.0 MediumFix available
CVE-2006-1742 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published April 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.97%, the 90th percentile. Fixed in thunderbird 1.5.0.2-1.
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.
Exploit likelihood
3.97%Down 0.4 points since Feb 4, 2022
What each source reports
NVD Score used
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.
- Record
CVE-2006-1742- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.
- Record
CVE-2006-1742- Updated
- 2026-11-02
EUVDEUVD-2006-1742 No score
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.
- Record
EUVD-2006-1742- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7mq9-p447-2gr2 No score
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8,...
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.
- Record
GHSA-7mq9-p447-2gr2- Updated
- 2026-11-02
OSV No score
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.
- Record
CVE-2006-1742- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1742 No score
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.
- Record
DEBIAN-CVE-2006-1742- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 |
before 1.5.0.2-1 | 1.5.0.2-1 |
thunderbirdDebian:13 |
before 1.5.0.2-1 | 1.5.0.2-1 |
thunderbirdDebian:14 |
before 1.5.0.2-1 | 1.5.0.2-1 |
mozilla-firefoxDebian:3.1 |
before 1.0.4-2sarge6, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge21.0.4-2sarge31.0.4-2sarge41.0.4-2sarge5 |
1.0.4-2sarge6 |
mozillaDebian:3.1 |
before 2:1.7.8-1sarge5, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge3 |
2:1.7.8-1sarge5 |
mozilla-thunderbirdDebian:3.1 |
before 1.0.2-2.sarge1.0.8, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.7 |
1.0.2-2.sarge1.0.8 |
firefoxRed Hat:enterprise_linux:4::as |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefoxRed Hat:enterprise_linux:4::desktop |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::es |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefoxRed Hat:enterprise_linux:4::ws |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
devhelpRed Hat:enterprise_linux:4::as |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-develRed Hat:enterprise_linux:4::as |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelpRed Hat:enterprise_linux:4::desktop |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-develRed Hat:enterprise_linux:4::desktop |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelpRed Hat:enterprise_linux:4::es |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-develRed Hat:enterprise_linux:4::es |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelpRed Hat:enterprise_linux:4::ws |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
devhelp-develRed Hat:enterprise_linux:4::ws |
before 0:0.9.2-2.4.8 | 0:0.9.2-2.4.8 |
thunderbirdRed Hat:enterprise_linux:4::as |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbirdRed Hat:enterprise_linux:4::desktop |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbirdRed Hat:enterprise_linux:4::es |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbirdRed Hat:enterprise_linux:4::ws |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.8-1.4.1 | 0:1.0.8-1.4.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
usn.ubuntu.com/275-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11808
redhat.com/support/errata/RHSA-2006-0330.html
secunia.com/advisories/19902
mozilla.org/security/announce/2006/mfsa2006-10.html
Show 194 moreShow less
securityfocus.com/archive/1/438730/100/0/threaded
gentoo.org/security/en/glsa/glsa-200604-12.xml
mandriva.com/security/advisories?name=MDKSA-2006:075
support.avaya.com/elmodocs2/security/ASA-2006-205.htm
debian.org/security/2006/dsa-1051
sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
exchange.xforce.ibmcloud.com/vulnerabilities/25807
vupen.com/english/advisories/2006/1356
kb.cert.org/vuls/id/492382
novell.com/linux/security/advisories/2006_04_25.html
nvd.nist.gov/vuln/detail/CVE-2006-1742
github.com/advisories/GHSA-7mq9-p447-2gr2
security-tracker.debian.org/tracker/CVE-2006-1742
access.redhat.com/errata/RHSA-2006:0328
mozilla.com/firefox/releases/1.0.8.html
bugzilla.redhat.com/show_bug.cgi?id=183537
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0328.json
cve.org/CVERecord?id=CVE-2006-0748
This page doesn't list everything
Left out here: 5 references. The JSON record has them.