CVE-2006-5747: High severity Mozilla Thunderbird vulnerability
Published Nov 8, 2006
·Updated
Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function.
Affected Software
29 affected components
Mozilla Thunderbird=1.5.0.7
Mozilla SeaMonkey=1.0.3
Mozilla Firefox=1.5-beta2
Mozilla SeaMonkey=1.0.1
Mozilla Firefox=1.5.0.6
Mozilla Firefox=1.5.0.3
Mozilla SeaMonkey=1.0
Mozilla Thunderbird=1.0.7
Mozilla Firefox=1.5-beta1
Mozilla Firefox=1.5
Mozilla Thunderbird=1.0
Mozilla Thunderbird=1.0.1
Mozilla Thunderbird=1.5-beta2
Mozilla SeaMonkey=1.0.2
Mozilla Thunderbird=1.0.2
Mozilla Firefox=1.5.0.7
Mozilla Thunderbird=1.5
Mozilla Thunderbird=1.5.0.2
Mozilla SeaMonkey=1.0.5
Mozilla Firefox=1.5.0.5
Mozilla Firefox=1.5.0.2
Mozilla SeaMonkey=1.0
Mozilla Thunderbird=1.0.6
Mozilla Thunderbird=1.5.0.1
Mozilla Thunderbird=1.0.8
Mozilla Thunderbird=1.0.5
Mozilla Firefox=1.5.0.4
Mozilla Firefox=1.5.0.1
Mozilla Thunderbird=1.5.0.4
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Nov 8, 2006
CVE Published
09:07 PM
Data Sourced
via NVD·09:07 PM
RemedyDescriptionSeverityAffected Software
Nov 9, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5747?
CVE-2006-5747 is classified as a critical vulnerability as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2006-5747?
To fix CVE-2006-5747, update to the latest version of Mozilla Firefox, Thunderbird, or SeaMonkey as applicable.
3
What software is affected by CVE-2006-5747?
CVE-2006-5747 affects Mozilla Firefox versions before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6.
4
What type of attack can be performed using CVE-2006-5747?
CVE-2006-5747 can be exploited by attackers to execute arbitrary code on affected systems.
5
Is there a workaround for CVE-2006-5747?
There is no effective workaround for CVE-2006-5747 other than upgrading to the secure versions.