CVE-2006-6499
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird...
CVE-2006-6499 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published December 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.94%, the 90th percentile. Fixed in firefox-esr 45.0esr-1.
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
Exploit likelihood
What each source reports
NVD Score used
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
- Record
CVE-2006-6499- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-835
- Updated
- 2026-11-02
CVE List No score
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
- Record
CVE-2006-6499- Updated
- 2026-11-02
EUVDEUVD-2006-6482 No score
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
- Record
EUVD-2006-6482- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-636h-f5g9-p45x No score
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird...
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
- Record
GHSA-636h-f5g9-p45x- Weakness
- CWE-835
- Updated
- 2026-11-02
OSV No score
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
- Record
CVE-2006-6499- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-6499 No score
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
- Record
DEBIAN-CVE-2006-6499- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefox-esrDebian:12 |
before 45.0esr-1 | 45.0esr-1 |
firefox-esrDebian:13 |
before 45.0esr-1 | 45.0esr-1 |
firefox-esrDebian:14 |
before 45.0esr-1 | 45.0esr-1 |
mozilla-firefoxDebian:3.1 |
before 1.0.4-2sarge15, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge101.0.4-2sarge111.0.4-2sarge12 Show 9 moreShow less1.0.4-2sarge131.0.4-2sarge141.0.4-2sarge21.0.4-2sarge31.0.4-2sarge41.0.4-2sarge51.0.4-2sarge61.0.4-2sarge71.0.4-2sarge9 |
1.0.4-2sarge15 |
mozilla-thunderbirdDebian:3.1 |
before 1.0.2-2.sarge1.0.8e.2, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.71.0.2-2.sarge1.0.81.0.2-2.sarge1.0.8a Show 5 moreShow less1.0.2-2.sarge1.0.8b.11.0.2-2.sarge1.0.8b.21.0.2-2.sarge1.0.8c.11.0.2-2.sarge1.0.8d.11.0.2-2.sarge1.0.8e.1 |
1.0.2-2.sarge1.0.8e.2 |
mozillaDebian:3.1 |
before 2:1.7.8-1sarge10, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge32:1.7.8-1sarge5 Show 8 moreShow less2:1.7.8-1sarge62:1.7.8-1sarge72:1.7.8-1sarge7.12:1.7.8-1sarge7.2.12:1.7.8-1sarge7.2.22:1.7.8-1sarge7.3.12:1.7.8-1sarge82:1.7.8-1sarge9 |
2:1.7.8-1sarge10 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/21668
secunia.com/advisories/23672
vupen.com/english/advisories/2006/5068
securitytracker.com/id?1017398
debian.org/security/2007/dsa-1265
Show 31 moreShow less
ubuntu.com/usn/usn-398-2
gentoo.org/security/en/glsa/glsa-200701-04.xml
mozilla.org/security/announce/2006/mfsa2006-68.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
novell.com/linux/security/advisories/2006_80_mozilla.html
kb.cert.org/vuls/id/427972
sunsolve.sun.com/search/document.do?assetkey=1-26-102846-1
us-cert.gov/cas/techalerts/TA06-354A.html
security.gentoo.org/glsa/glsa-200701-02.xml
nvd.nist.gov/vuln/detail/CVE-2006-6499
github.com/advisories/GHSA-636h-f5g9-p45x
security-tracker.debian.org/tracker/CVE-2006-6499