CVE-2006-3801
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a...
7.5 HighFix available
CVE-2006-3801 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published July 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.43%, the 91st percentile. Fixed in thunderbird 1.5.0.5-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 4.43%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.5.0.5-1thunderbird +102 more
Description
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
Exploit likelihood
4.43%Up 0.1 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 | before 1.5.0.5-1 | 1.5.0.5-1 |
thunderbirdDebian:13 | before 1.5.0.5-1 | 1.5.0.5-1 |
thunderbirdDebian:14 | before 1.5.0.5-1 | 1.5.0.5-1 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
Show 93 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-0.el3.1 | 0:1.0.3-0.el3.1 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:0.10-0.2.el4 | 0:0.10-0.2.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 26 CVEs | before 0:1.0.3-0.el4.1 | 0:1.0.3-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 24 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 25 CVEs | before 0:1.5.0.5-0.el4.1 | 0:1.5.0.5-0.el4.1 |
What each source reports
NVD Score used
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
- Record
CVE-2006-3801- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
- Record
CVE-2006-3801- Updated
- 2026-11-02
EUVDEUVD-2006-3795No score
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
- Record
EUVD-2006-3795- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-888j-w88x-vjqrNo score
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a...
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
- Record
GHSA-888j-w88x-vjqr- Updated
- 2026-11-02
OSVNo score
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
- Record
CVE-2006-3801- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-3801No score
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
- Record
DEBIAN-CVE-2006-3801- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/21243
redhat.com/support/errata/RHSA-2006-0608.html
security.gentoo.org/glsa/glsa-200608-02.xml
mandriva.com/security/advisories?name=MDKSA-2006:145
vupen.com/english/advisories/2006/3748
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11501
Show 168 moreShow less
securityfocus.com/bid/19181
us-cert.gov/cas/techalerts/TA06-208A.html
gentoo.org/security/en/glsa/glsa-200608-03.xml
securitytracker.com/id?1016588
rhn.redhat.com/errata/RHSA-2006-0609.html
usn.ubuntu.com/327-1
exchange.xforce.ibmcloud.com/vulnerabilities/27980
novell.com/linux/security/advisories/2006_48_seamonkey.html
kb.cert.org/vuls/id/476724
issues.rpath.com/browse/RPL-536
mozilla.org/security/announce/2006/mfsa2006-44.html
ubuntu.com/usn/usn-354-1
nvd.nist.gov/vuln/detail/CVE-2006-3801
github.com/advisories/GHSA-888j-w88x-vjqr
security-tracker.debian.org/tracker/CVE-2006-3801
access.redhat.com/errata/RHSA-2006:0608
bugzilla.redhat.com/show_bug.cgi?id=200253
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0608.json
cve.org/CVERecord?id=CVE-2006-3113