CVE-2006-2776: High severity Mozilla Thunderbird vulnerability
Published Jun 2, 2006
·Updated
Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.
Affected Software
47 affected components
Mozilla Thunderbird=0.6
Mozilla Firefox=0.8
Mozilla Thunderbird=0.7.2
Mozilla Firefox=1.5-beta2
Mozilla Thunderbird=0.3
Mozilla Firefox=1.5.0.3
Mozilla Thunderbird=0.2
Mozilla Thunderbird=1.0.7
Mozilla Firefox=1.0.2
Mozilla Firefox=1.5-beta1
Mozilla Firefox=1.5
Mozilla Firefox=0.9.1
Mozilla Firefox=1.0.4
Mozilla Firefox=1.0.7
Mozilla Firefox=0.10.1
Mozilla Thunderbird=1.0
Mozilla Firefox=0.9
Mozilla Thunderbird=1.0.1
Mozilla Thunderbird=1.5-beta2
Mozilla Thunderbird=1.0.2
Mozilla Firefox=1.0
Mozilla Thunderbird=1.5
Mozilla Firefox=1.0.1
Mozilla Firefox=1.0.6
Mozilla Thunderbird=0.5
Mozilla Thunderbird=1.0.4
Mozilla Thunderbird=0.9
Mozilla Thunderbird=1.0.3
Mozilla Firefox=1.5.0.2
Mozilla Firefox=1.0.3
Mozilla Thunderbird=0.7.3
Mozilla Firefox=0.9.3
Mozilla Thunderbird=0.4
Mozilla Thunderbird=0.7
Mozilla Thunderbird=1.0.6
Mozilla Thunderbird=1.0.5-beta
Mozilla Firefox=0.9.2
Mozilla Thunderbird=1.5.0.1
Mozilla Thunderbird=0.1
Mozilla Firefox=0.9-rc
Mozilla Thunderbird=0.7.1
Mozilla Thunderbird=1.0.5
Mozilla Thunderbird=0.8
Mozilla Firefox=1.5.0.1
Mozilla Firefox=0.10
Mozilla Firefox=1.0.5
Mozilla Firefox=1.0.6
Remediation
Patch Available
Event History
Jun 2, 2006
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2776?
CVE-2006-2776 is classified as a medium severity vulnerability.
2
How do I fix CVE-2006-2776?
To fix CVE-2006-2776, update your Mozilla Firefox or Thunderbird to the latest version available.
3
What versions are affected by CVE-2006-2776?
CVE-2006-2776 affects multiple versions of Mozilla Firefox and Thunderbird prior to versions 1.5.0.4.
4
What types of attacks exploit CVE-2006-2776?
CVE-2006-2776 can be exploited by remote attackers to execute code at higher privileges.
5
Is CVE-2006-2776 still a risk today?
CVE-2006-2776 is less of a risk today as it affects very outdated versions of software.