Vulnerability in Mozilla Firefox
CVE-2006-0295
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which lead…
EPSS: 0.707 (99.3th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox — versions 1.5
- Mozilla Seamonkey — versions 1.0
- Mozilla Thunderbird — versions 1.5
- N/a — versions n/a
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_HP, vendor-advisory)
Frequently asked questions
- What is CVE-2006-0295?
- CVE-2006-0295 is a vulnerability in Mozilla Firefox. Published 2006-02-02.
- Is CVE-2006-0295 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.