CVE-2006-6501
First published: Wed Dec 20 2006(Updated: )
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | >=1.5<1.5.0.9 | |
| Firefox | >=2.0<2.0.0.1 | |
| Mozilla SeaMonkey | <1.0.7 | |
| Thunderbird | <1.5.0.9 | |
| Debian | =3.1 | |
| Debian | =4.0 | |
| Ubuntu | =6.06 | |
| Ubuntu | =6.10 | |
| Ubuntu | =5.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.mozilla.org/security/announce/2006/mfsa2006-70.html
- http://rhn.redhat.com/errata/RHSA-2006-0758.html
- http://rhn.redhat.com/errata/RHSA-2006-0759.html
- http://rhn.redhat.com/errata/RHSA-2006-0760.html
- http://securitytracker.com/id?1017403
- http://securitytracker.com/id?1017404
- http://securitytracker.com/id?1017407
- http://secunia.com/advisories/23433
- http://secunia.com/advisories/23439
- http://secunia.com/advisories/23440
- https://issues.rpath.com/browse/RPL-883
- http://www.us-cert.gov/cas/techalerts/TA06-354A.html
- http://www.securityfocus.com/bid/21668
- http://secunia.com/advisories/23282
- http://secunia.com/advisories/23420
- http://secunia.com/advisories/23422
- http://secunia.com/advisories/23468
- http://secunia.com/advisories/23514
- http://www.novell.com/linux/security/advisories/2006_80_mozilla.html
- http://www.ubuntu.com/usn/usn-398-1
- http://secunia.com/advisories/23589
- http://fedoranews.org/cms/node/2297
- http://fedoranews.org/cms/node/2338
- http://security.gentoo.org/glsa/glsa-200701-02.xml
- http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml
- http://www.ubuntu.com/usn/usn-398-2
- http://www.ubuntu.com/usn/usn-400-1
- http://secunia.com/advisories/23601
- http://secunia.com/advisories/23545
- http://secunia.com/advisories/23591
- http://secunia.com/advisories/23598
- http://secunia.com/advisories/23614
- http://secunia.com/advisories/23618
- http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml
- http://secunia.com/advisories/23692
- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html
- http://www.kb.cert.org/vuls/id/263412
- http://secunia.com/advisories/23672
- http://www.debian.org/security/2007/dsa-1253
- http://www.debian.org/security/2007/dsa-1258
- http://www.debian.org/security/2007/dsa-1265
- http://secunia.com/advisories/23988
- http://secunia.com/advisories/24078
- http://secunia.com/advisories/24390
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:010
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:011
- http://www.vupen.com/english/advisories/2008/0083
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://www.vupen.com/english/advisories/2006/5068
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9746
- http://www.securityfocus.com/archive/1/455728/100/200/threaded
- http://www.securityfocus.com/archive/1/455145/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-6501?
CVE-2006-6501 is classified as a critical vulnerability that allows remote attackers to gain privileges and install malicious code.
How do I fix CVE-2006-6501?
To fix CVE-2006-6501, users should upgrade to the latest version of affected software, such as Mozilla Firefox 2.0.0.1 or later, Thunderbird 1.5.0.9 or later, and SeaMonkey 1.0.7 or later.
Which applications are affected by CVE-2006-6501?
CVE-2006-6501 affects Mozilla Firefox 2.x before 2.0.0.1, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7.
Is there a workaround for CVE-2006-6501?
There are no known workarounds for CVE-2006-6501; the only mitigation is to update to the latest version of the software.
When was CVE-2006-6501 disclosed?
CVE-2006-6501 was disclosed in 2006, prompting users to take immediate action to secure their systems.
- agent/type
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- collector/nvd-historical
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/mozilla
- canonical/firefox
- version/firefox/1.5
- version/firefox/2.0
- canonical/mozilla seamonkey
- canonical/thunderbird
- vendor/debian
- canonical/debian
- version/debian/3.1
- version/debian/4.0
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/6.06
- version/ubuntu/6.10
- version/ubuntu/5.10