CVE-2006-1736
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey...
CVE-2006-1736 is a low vulnerability (CVSS 2.6) in Mozilla Firefox, published April 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. No source names a fixed version.
- Severity
- 2.6 LowCVSS 2.0, NVD
- Exploit chance
- 2.50%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mozilla-firefoxDebian:3.1 From an advisory covering 23 CVEs | before 1.0.4-2sarge6, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge21.0.4-2sarge31.0.4-2sarge41.0.4-2sarge5 | 1.0.4-2sarge6 |
mozillaDebian:3.1 From an advisory covering 31 CVEs | before 2:1.7.8-1sarge5, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge3 | 2:1.7.8-1sarge5 |
mozilla-thunderbirdDebian:3.1 From an advisory covering 28 CVEs | before 1.0.2-2.sarge1.0.8, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.7 | 1.0.2-2.sarge1.0.8 |
What each source reports
NVD Score used
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.
- Record
CVE-2006-1736- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.
- Record
CVE-2006-1736- Updated
- 2026-11-02
EUVDEUVD-2006-1736No score
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.
- Record
EUVD-2006-1736- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hm24-rgjh-p3xcNo score
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey...
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.
- Record
GHSA-hm24-rgjh-p3xc- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
usn.ubuntu.com/275-1
secunia.com/advisories/19902
exchange.xforce.ibmcloud.com/vulnerabilities/25814
securityfocus.com/archive/1/438730/100/0/threaded
gentoo.org/security/en/glsa/glsa-200604-12.xml
Show 28 moreShow less
mozilla.org/security/announce/2006/mfsa2006-13.html
mandriva.com/security/advisories?name=MDKSA-2006:075
support.avaya.com/elmodocs2/security/ASA-2006-205.htm
debian.org/security/2006/dsa-1051
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1548
sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
vupen.com/english/advisories/2006/1356
bugzilla.mozilla.org/show_bug.cgi?id=293527
nvd.nist.gov/vuln/detail/CVE-2006-1736
github.com/advisories/GHSA-hm24-rgjh-p3xc