CVE-2006-2777
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows...
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.
- Record
CVE-2006-2777- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.
- Record
CVE-2006-2777- Updated
- 2026-11-02
EUVDEUVD-2006-2774 No score
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.
- Record
EUVD-2006-2774- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5w8p-847h-44hj No score
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows...
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.
- Record
GHSA-5w8p-847h-44hj- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mozillaDebian:3.1 From an advisory covering 14 CVEs |
before 2:1.7.8-1sarge7.1, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge32:1.7.8-1sarge52:1.7.8-1sarge62:1.7.8-1sarge7 |
2:1.7.8-1sarge7.1 |
mozilla-firefoxDebian:3.1 From an advisory covering 13 CVEs |
before 1.0.4-2sarge9, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge21.0.4-2sarge31.0.4-2sarge41.0.4-2sarge51.0.4-2sarge61.0.4-2sarge7 |
1.0.4-2sarge9 |
mozilla-thunderbirdDebian:3.1 From an advisory covering 15 CVEs |
before 1.0.2-2.sarge1.0.8a, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.71.0.2-2.sarge1.0.8 |
1.0.2-2.sarge1.0.8a |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2777 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published June 2, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.03%, the 93rd percentile. No source names a fixed version.
References
secunia.com/advisories/21176
mandriva.com/security/advisories?name=MDKSA-2006:145
vupen.com/english/advisories/2006/3748
usn.ubuntu.com/296-1
Show 29 moreShow less
kb.cert.org/vuls/id/237257
exchange.xforce.ibmcloud.com/vulnerabilities/26853
us-cert.gov/cas/techalerts/TA06-153A.html
securityfocus.com/archive/1/435795/100/0/threaded
securitytracker.com/id?1016202
debian.org/security/2006/dsa-1118
mozilla.org/security/announce/2006/mfsa2006-43.html
gentoo.org/security/en/glsa/glsa-200606-12.xml
sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1
novell.com/linux/security/advisories/2006_35_mozilla.html
nvd.nist.gov/vuln/detail/CVE-2006-2777
github.com/advisories/GHSA-5w8p-847h-44hj