CVE-2006-3803: Race Condition
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3803?
CVE-2006-3803 is considered a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2006-3803?
To fix CVE-2006-3803, upgrade your Mozilla Firefox, Thunderbird, or SeaMonkey to versions 1.5.0.5 or later.
What software is affected by CVE-2006-3803?
CVE-2006-3803 affects Mozilla Firefox versions prior to 1.5.0.5, Thunderbird versions prior to 1.5.0.5, and SeaMonkey versions prior to 1.0.3.
Is CVE-2006-3803 exploitable remotely?
Yes, CVE-2006-3803 can be exploited remotely by attackers to execute arbitrary code.
What systems are at risk from CVE-2006-3803?
Systems running vulnerable versions of Mozilla Firefox, Thunderbird, and SeaMonkey are at risk from CVE-2006-3803.