CVE-2006-4571
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and...
10.0 HighFix available
CVE-2006-4571 is a high vulnerability (CVSS 10.0) in Mozilla Seamonkey, published September 15, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.88%, the 93rd percentile. Fixed in thunderbird 1.5.0.7-1.
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
Exploit likelihood
5.88%Down 2.3 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
- Record
CVE-2006-4571- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
- Record
CVE-2006-4571- Updated
- 2026-11-02
EUVDEUVD-2006-4559 No score
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
- Record
EUVD-2006-4559- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vp9x-6f47-r7r2 No score
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and...
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
- Record
GHSA-vp9x-6f47-r7r2- Updated
- 2026-11-02
OSV No score
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
- Record
CVE-2006-4571- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4571 No score
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
- Record
DEBIAN-CVE-2006-4571- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 |
before 1.5.0.7-1 | 1.5.0.7-1 |
thunderbirdDebian:13 |
before 1.5.0.7-1 | 1.5.0.7-1 |
thunderbirdDebian:14 |
before 1.5.0.7-1 | 1.5.0.7-1 |
mozilla-thunderbirdDebian:3.1 |
before 1.0.2-2.sarge1.0.8c.1, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.71.0.2-2.sarge1.0.81.0.2-2.sarge1.0.8a1.0.2-2.sarge1.0.8b.11.0.2-2.sarge1.0.8b.2 |
1.0.2-2.sarge1.0.8c.1 |
mozillaDebian:3.1 |
before 2:1.7.8-1sarge7.3.1, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge32:1.7.8-1sarge5 Show 5 moreShow less2:1.7.8-1sarge62:1.7.8-1sarge72:1.7.8-1sarge7.12:1.7.8-1sarge7.2.12:1.7.8-1sarge7.2.2 |
2:1.7.8-1sarge7.3.1 |
mozilla-firefoxDebian:3.1 |
before 1.0.4-2sarge12, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge101.0.4-2sarge111.0.4-2sarge2 Show 6 moreShow less1.0.4-2sarge31.0.4-2sarge41.0.4-2sarge51.0.4-2sarge61.0.4-2sarge71.0.4-2sarge9 |
1.0.4-2sarge12 |
firefoxRed Hat:enterprise_linux:4::as |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
Show 96 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::es |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
seamonkeyRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkeyRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
devhelpRed Hat:enterprise_linux:4::as |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-develRed Hat:enterprise_linux:4::as |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
seamonkeyRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
devhelpRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
devhelpRed Hat:enterprise_linux:4::es |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-develRed Hat:enterprise_linux:4::es |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
seamonkeyRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
devhelpRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::as |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::es |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securitytracker.com/id?1016847
secunia.com/advisories/22391
vupen.com/english/advisories/2006/3748
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11728
redhat.com/support/errata/RHSA-2006-0676.html
Show 98 moreShow less
ubuntu.com/usn/usn-361-1
mandriva.com/security/advisories?name=MDKSA-2006:168
us.debian.org/security/2006/dsa-1191
debian.org/security/2006/dsa-1210
security.gentoo.org/glsa/glsa-200610-04.xml
support.avaya.com/elmodocs2/security/ASA-2006-224.htm
www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742
securityfocus.com/bid/20042
issues.rpath.com/browse/RPL-640
mozilla.org/security/announce/2006/mfsa2006-64.html
nvd.nist.gov/vuln/detail/CVE-2006-4571
github.com/advisories/GHSA-vp9x-6f47-r7r2
security-tracker.debian.org/tracker/CVE-2006-4571
access.redhat.com/errata/RHSA-2006:0675
bugzilla.redhat.com/show_bug.cgi?id=206428
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0675.json
cve.org/CVERecord?id=CVE-2006-4253