CVE-2006-2788
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote...
7.5 High
CVE-2006-2788 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published June 2, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.37%, the 91st percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 4.37%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.
Exploit likelihood
4.37%Down 3.9 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mozilla-thunderbirdDebian:3.1 From an advisory covering 7 CVEs | before 1.0.2-2.sarge1.0.8c.1, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.71.0.2-2.sarge1.0.81.0.2-2.sarge1.0.8a1.0.2-2.sarge1.0.8b.11.0.2-2.sarge1.0.8b.2 | 1.0.2-2.sarge1.0.8c.1 |
mozillaDebian:3.1 From an advisory covering 7 CVEs | before 2:1.7.8-1sarge7.3.1, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge32:1.7.8-1sarge5 Show 5 moreShow less2:1.7.8-1sarge62:1.7.8-1sarge72:1.7.8-1sarge7.12:1.7.8-1sarge7.2.12:1.7.8-1sarge7.2.2 | 2:1.7.8-1sarge7.3.1 |
mozilla-firefoxDebian:3.1 From an advisory covering 6 CVEs | before 1.0.4-2sarge12, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge101.0.4-2sarge111.0.4-2sarge2 Show 6 moreShow less1.0.4-2sarge31.0.4-2sarge41.0.4-2sarge51.0.4-2sarge61.0.4-2sarge71.0.4-2sarge9 | 1.0.4-2sarge12 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
Show 93 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs | before 0:1.0.2-0.1.0.EL3 | 0:1.0.2-0.1.0.EL3 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
What each source reports
NVD Score used
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.
- Record
CVE-2006-2788- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.
- Record
CVE-2006-2788- Updated
- 2026-11-02
EUVDEUVD-2006-2785No score
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.
- Record
EUVD-2006-2785- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5g7c-rmr5-h878No score
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote...
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.
- Record
GHSA-5g7c-rmr5-h878- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
mandriva.com/security/advisories?name=MDKSA-2006:145
usn.ubuntu.com/296-1
ubuntu.com/usn/usn-361-1
bugzilla.mozilla.org/show_bug.cgi?id=321598
redhat.com/support/errata/RHSA-2006-0594.html
secunia.com/advisories/21336
Show 141 moreShow less
us.debian.org/security/2006/dsa-1191
rhn.redhat.com/errata/RHSA-2006-0609.html
debian.org/security/2006/dsa-1210
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11065
nvd.nist.gov/vuln/detail/CVE-2006-2788
github.com/advisories/GHSA-5g7c-rmr5-h878
access.redhat.com/errata/RHSA-2006:0578
bugzilla.redhat.com/show_bug.cgi?id=196971
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0578.json
cve.org/CVERecord?id=CVE-2006-2776