CVE-2006-3803
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5,...
5.1 MediumFix available
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.
Exploit likelihood
4.46%Down 5.5 points since Feb 4, 2022
What each source reports
NVD Score used
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.
- Record
CVE-2006-3803- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.
- Record
CVE-2006-3803- Updated
- 2026-11-02
EUVDEUVD-2006-3797 No score
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.
- Record
EUVD-2006-3797- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w9wh-5q96-r696 No score
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5,...
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.
- Record
GHSA-w9wh-5q96-r696- Updated
- 2026-11-02
OSV No score
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.
- Record
CVE-2006-3803- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-3803 No score
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.
- Record
DEBIAN-CVE-2006-3803- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 |
before 1.5.0.5-1 | 1.5.0.5-1 |
thunderbirdDebian:13 |
before 1.5.0.5-1 | 1.5.0.5-1 |
thunderbirdDebian:14 |
before 1.5.0.5-1 | 1.5.0.5-1 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
Show 93 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs |
before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 24 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 25 CVEs |
before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3803 is a medium vulnerability (CVSS 5.1) in Mozilla Firefox, published July 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.46%, the 91st percentile. Fixed in thunderbird 1.5.0.5-1.
References
secunia.com/advisories/21243
redhat.com/support/errata/RHSA-2006-0608.html
security.gentoo.org/glsa/glsa-200608-02.xml
mandriva.com/security/advisories?name=MDKSA-2006:145
vupen.com/english/advisories/2006/3748
securityfocus.com/bid/19181
Show 175 moreShow less
us-cert.gov/cas/techalerts/TA06-208A.html
gentoo.org/security/en/glsa/glsa-200608-03.xml
securitytracker.com/id?1016588
usn.ubuntu.com/329-1
rhn.redhat.com/errata/RHSA-2006-0609.html
novell.com/linux/security/advisories/2006_48_seamonkey.html
exchange.xforce.ibmcloud.com/vulnerabilities/27984
ubuntu.com/usn/usn-350-1
kb.cert.org/vuls/id/265964
issues.rpath.com/browse/RPL-536
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10635
mozilla.org/security/announce/2006/mfsa2006-48.html
nvd.nist.gov/vuln/detail/CVE-2006-3803
github.com/advisories/GHSA-w9wh-5q96-r696
security-tracker.debian.org/tracker/CVE-2006-3803
access.redhat.com/errata/RHSA-2006:0608
bugzilla.redhat.com/show_bug.cgi?id=200253
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0608.json
cve.org/CVERecord?id=CVE-2006-3113