Vulnerability Report

CVE-2006-6498

Title: Mozilla Firefox RCE

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2006-6498.

CWE Category NVD-CWE-noinfo

Published Date Dec 20, 2006

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 6.8 CVSS v2.0

Exploit Probability (EPSS)

4.32%

Vulnerability Summary

CVE-2006-6498: Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and Mozilla 1.7 and probably earlier on Solaris, allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown impact and attack vectors.

Impacted Vendors

mozilla 4

Reference Links

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc http://fedoranews.org/cms/node/2297 http://fedoranews.org/cms/node/2338 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://rhn.redhat.com/errata/RHSA-2006-0758.html http://rhn.redhat.com/errata/RHSA-2006-0759.html http://rhn.redhat.com/errata/RHSA-2006-0760.html http://secunia.com/advisories/23282 http://secunia.com/advisories/23420 http://secunia.com/advisories/23422 http://secunia.com/advisories/23433 http://secunia.com/advisories/23439 http://secunia.com/advisories/23440 http://secunia.com/advisories/23468 http://secunia.com/advisories/23514 http://secunia.com/advisories/23545 http://secunia.com/advisories/23589 http://secunia.com/advisories/23591 http://secunia.com/advisories/23601 http://secunia.com/advisories/23614 http://secunia.com/advisories/23618 http://secunia.com/advisories/23672 http://secunia.com/advisories/23692 http://secunia.com/advisories/23988 http://secunia.com/advisories/24078 http://secunia.com/advisories/24390 http://secunia.com/advisories/25556 http://security.gentoo.org/glsa/glsa-200701-02.xml http://securitytracker.com/id?1017398 http://securitytracker.com/id?1017405 http://securitytracker.com/id?1017406 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102955-1 http://www.debian.org/security/2007/dsa-1253 http://www.debian.org/security/2007/dsa-1258 http://www.debian.org/security/2007/dsa-1265 http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml http://www.kb.cert.org/vuls/id/427972 http://www.kb.cert.org/vuls/id/447772 http://www.mozilla.org/security/announce/2006/mfsa2006-68.html http://www.novell.com/linux/security/advisories/2006_80_mozilla.html http://www.novell.com/linux/security/advisories/2007_06_mozilla.html http://www.securityfocus.com/archive/1/455145/100/0/threaded http://www.securityfocus.com/archive/1/455728/100/200/threaded http://www.securityfocus.com/bid/21668 http://www.ubuntu.com/usn/usn-398-1 http://www.ubuntu.com/usn/usn-398-2 http://www.ubuntu.com/usn/usn-400-1 http://www.us-cert.gov/cas/techalerts/TA06-354A.html http://www.vupen.com/english/advisories/2006/5068 http://www.vupen.com/english/advisories/2007/2106 http://www.vupen.com/english/advisories/2008/0083 https://issues.rpath.com/browse/RPL-883 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10661 ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc http://fedoranews.org/cms/node/2297 http://fedoranews.org/cms/node/2338 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://rhn.redhat.com/errata/RHSA-2006-0758.html http://rhn.redhat.com/errata/RHSA-2006-0759.html http://rhn.redhat.com/errata/RHSA-2006-0760.html http://secunia.com/advisories/23282 http://secunia.com/advisories/23420 http://secunia.com/advisories/23422 http://secunia.com/advisories/23433 http://secunia.com/advisories/23439 http://secunia.com/advisories/23440 http://secunia.com/advisories/23468 http://secunia.com/advisories/23514 http://secunia.com/advisories/23545 http://secunia.com/advisories/23589 http://secunia.com/advisories/23591 http://secunia.com/advisories/23601 http://secunia.com/advisories/23614 http://secunia.com/advisories/23618 http://secunia.com/advisories/23672 http://secunia.com/advisories/23692 http://secunia.com/advisories/23988 http://secunia.com/advisories/24078 http://secunia.com/advisories/24390 http://secunia.com/advisories/25556 http://security.gentoo.org/glsa/glsa-200701-02.xml http://securitytracker.com/id?1017398 http://securitytracker.com/id?1017405 http://securitytracker.com/id?1017406 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102955-1 http://www.debian.org/security/2007/dsa-1253 http://www.debian.org/security/2007/dsa-1258 http://www.debian.org/security/2007/dsa-1265 http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml http://www.kb.cert.org/vuls/id/427972 http://www.kb.cert.org/vuls/id/447772 http://www.mozilla.org/security/announce/2006/mfsa2006-68.html http://www.novell.com/linux/security/advisories/2006_80_mozilla.html http://www.novell.com/linux/security/advisories/2007_06_mozilla.html http://www.securityfocus.com/archive/1/455145/100/0/threaded http://www.securityfocus.com/archive/1/455728/100/200/threaded http://www.securityfocus.com/bid/21668 http://www.ubuntu.com/usn/usn-398-1 http://www.ubuntu.com/usn/usn-398-2 http://www.ubuntu.com/usn/usn-400-1 http://www.us-cert.gov/cas/techalerts/TA06-354A.html http://www.vupen.com/english/advisories/2006/5068 http://www.vupen.com/english/advisories/2007/2106 http://www.vupen.com/english/advisories/2008/0083 https://issues.rpath.com/browse/RPL-883 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10661

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

6.8

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2006-6498 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 23, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

December 20, 2006 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.