CVE-2006-3677
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute...
7.5 HighPublic exploit
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
Exploit likelihood
80.0%Down 5.8 points since Feb 4, 2022
What each source reports
NVD Score used
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
- Record
CVE-2006-3677- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
- Record
CVE-2006-3677- Updated
- 2026-11-02
EUVDEUVD-2006-3672 No score
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
- Record
EUVD-2006-3672- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wj5j-gg8h-gp5m No score
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute...
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
- Record
GHSA-wj5j-gg8h-gp5m- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
Show 90 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Mozilla Suite/Firefox < 1.5.0.5 - Navigator Object Code Execution (Metasploit) | 2006-07-25 |
| Metasploit | Mozilla Suite/Firefox Navigator Object Code Execution | 2006-07-25 |
| Exploit-DB | Mozilla Firefox 1.5.0.4 - JavaScript Navigator Object Code Execution | 2006-07-28 |
| Exploit-DB | Mozilla Suite/Firefox - Navigator Object Code Execution (Metasploit) | 2010-09-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3677 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published July 27, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 80.0%, the 99th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/441332/100/0/threaded
secunia.com/advisories/21243
redhat.com/support/errata/RHSA-2006-0608.html
security.gentoo.org/glsa/glsa-200608-02.xml
mandriva.com/security/advisories?name=MDKSA-2006:145
vupen.com/english/advisories/2006/3748
Show 163 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/39998
us-cert.gov/cas/techalerts/TA06-208A.html
zerodayinitiative.com/advisories/ZDI-06-025.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745
gentoo.org/security/en/glsa/glsa-200608-03.xml
kb.cert.org/vuls/id/670060
rhn.redhat.com/errata/RHSA-2006-0609.html
securitytracker.com/id?1016586
mozilla.org/security/announce/2006/mfsa2006-45.html
usn.ubuntu.com/327-1
novell.com/linux/security/advisories/2006_48_seamonkey.html
issues.rpath.com/browse/RPL-536
ubuntu.com/usn/usn-354-1
nvd.nist.gov/vuln/detail/CVE-2006-3677
github.com/advisories/GHSA-wj5j-gg8h-gp5m
access.redhat.com/errata/RHSA-2006:0608
bugzilla.redhat.com/show_bug.cgi?id=200253
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0608.json
cve.org/CVERecord?id=CVE-2006-3113