CVE-2006-2781
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey...
6.4 MediumFix available
CVE-2006-2781 is a medium vulnerability (CVSS 6.4) in Mozilla Seamonkey, published June 2, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.31%, the 88th percentile. Fixed in thunderbird 1.5.0.4-1.
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.
Exploit likelihood
3.31%Down 4.9 points since Feb 4, 2022
What each source reports
NVD Score used
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.
- Record
CVE-2006-2781- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.
- Record
CVE-2006-2781- Updated
- 2026-11-02
EUVDEUVD-2006-2778 No score
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.
- Record
EUVD-2006-2778- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-59hc-56j6-9j87 No score
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey...
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.
- Record
GHSA-59hc-56j6-9j87- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.
- Record
CVE-2006-2781- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-2781 No score
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.
- Record
DEBIAN-CVE-2006-2781- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 |
before 1.5.0.4-1 | 1.5.0.4-1 |
thunderbirdDebian:13 |
before 1.5.0.4-1 | 1.5.0.4-1 |
thunderbirdDebian:14 |
before 1.5.0.4-1 | 1.5.0.4-1 |
mozillaDebian:3.1 |
before 2:1.7.8-1sarge7.1, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge32:1.7.8-1sarge52:1.7.8-1sarge62:1.7.8-1sarge7 |
2:1.7.8-1sarge7.1 |
mozilla-thunderbirdDebian:3.1 |
before 1.0.2-2.sarge1.0.8a, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.71.0.2-2.sarge1.0.8 |
1.0.2-2.sarge1.0.8a |
seamonkeyRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-chatRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-develRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
Show 87 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-mailRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nssRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkeyRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkeyRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-chatRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-develRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-mailRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nssRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkeyRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
devhelpRed Hat:enterprise_linux:4::as |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::as |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::as |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::as |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::as |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::as |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::es |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::es |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::es |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::es |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::es |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::es |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::as |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::es |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/20709
usn.ubuntu.com/297-3
exchange.xforce.ibmcloud.com/vulnerabilities/26850
redhat.com/support/errata/RHSA-2006-0594.html
Show 148 moreShow less
securitytracker.com/id?1016214
securityfocus.com/archive/1/435795/100/0/threaded
vupen.com/english/advisories/2006/3749
mandriva.com/security/advisories?name=MDKSA-2006:146
rhn.redhat.com/errata/RHSA-2006-0609.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10247
gentoo.org/security/en/glsa/glsa-200606-21.xml
debian.org/security/2006/dsa-1118
novell.com/linux/security/advisories/2006_35_mozilla.html
mozilla.org/security/announce/2006/mfsa2006-40.html
nvd.nist.gov/vuln/detail/CVE-2006-2781
github.com/advisories/GHSA-59hc-56j6-9j87
security-tracker.debian.org/tracker/CVE-2006-2781
access.redhat.com/errata/RHSA-2006:0578
bugzilla.redhat.com/show_bug.cgi?id=196971
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0578.json
cve.org/CVERecord?id=CVE-2006-2776