{"api_version":"1","generated_at":"2026-07-23T11:18:37+00:00","cve":"CVE-2006-3806","urls":{"html":"https://cve.report/CVE-2006-3806","api":"https://cve.report/api/cve/CVE-2006-3806.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3806","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3806"},"summary":{"title":"CVE-2006-3806","description":"Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified \"string function arguments.\"","state":"PUBLIC","assigner":"secalert@redhat.com","published_at":"2006-07-27 19:04:00","updated_at":"2018-10-17 21:30:00"},"problem_types":["CWE-189"],"metrics":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27987","name":"mozilla-javascript-engine-overflow(27987)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21675","name":"21675","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Debian update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1","name":"102763","refsource":"SUNALERT","tags":[],"title":"#102763: Multiple Security Vulnerabilites in Mozilla 1.7 for Solaris 8, 9, and 10","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://issues.rpath.com/browse/RPL-537","name":"https://issues.rpath.com/browse/RPL-537","refsource":"CONFIRM","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"503"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","name":"RHSA-2006:0609","refsource":"REDHAT","tags":["Vendor Advisory"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/19873","name":"19873","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla Firefox Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/329-1/","name":"USN-329-1","refsource":"UBUNTU","tags":[],"title":"USN-329-1: Thunderbird vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/655892","name":"VU#655892","refsource":"CERT-VN","tags":["Third Party Advisory","US Government Resource"],"title":"US-CERT Vulnerability Note VU#655892","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-350-1","name":"USN-350-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-350-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","name":"SSRT061181","refsource":"HP","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21228","name":"21228","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla Thunderbird Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.rpath.com/browse/RPL-536","name":"https://issues.rpath.com/browse/RPL-536","refsource":"CONFIRM","tags":[],"title":"[#RPL-536] update firefox to 1.5.0.5 for security issues - rPath JIRA","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/21654","name":"21654","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Debian update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22066","name":"22066","refsource":"SECUNIA","tags":[],"title":"HP-UX update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1159","name":"DSA-1159","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-1159-2 mozilla-thunderbird","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","name":"SSRT061236","refsource":"HP","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016587","name":"1016587","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Seamonkey Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21343","name":"21343","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Gentoo update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/2998","name":"ADV-2006-2998","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://secunia.com/advisories/21229","name":"21229","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla SeaMonkey Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1160","name":"DSA-1160","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-1160-2 mozilla","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19181","name":"19181","refsource":"BID","tags":["Patch"],"title":"Mozilla Multiple Products Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html","name":"TA06-208A","refsource":"CERT","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA06-208A -- Mozilla Products Contain Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","name":"RHSA-2006:0611","refsource":"REDHAT","tags":["Vendor Advisory"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22055","name":"22055","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","name":"MDKSA-2006:143","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21529","name":"21529","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"SUSE update for MozillaFirefox, MozillaThunderbird, and Seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-354-1","name":"USN-354-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-354-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/21336","name":"21336","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/0083","name":"ADV-2008-0083","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","name":"20060727 rPSA-2006-0137-1 firefox","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22210","name":"22210","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232","name":"oval:org.mitre.oval:def:11232","refsource":"OVAL","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21243","name":"21243","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Ubuntu update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21216","name":"21216","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"rPath update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21532","name":"21532","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Mandriva update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3748","name":"ADV-2006-3748","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21361","name":"21361","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Gentoo update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","name":"RHSA-2006:0610","refsource":"REDHAT","tags":["Vendor Advisory"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21246","name":"21246","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","name":"RHSA-2006:0594","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21607","name":"21607","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Mandriva update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22065","name":"22065","refsource":"SECUNIA","tags":[],"title":"HP-UX update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21262","name":"21262","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"SGI Advanced Linux Environment Multiple Updates - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","name":"GLSA-200608-02","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla SeaMonkey: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21250","name":"21250","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"rPath update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc","name":"20060703-01-P","refsource":"SGI","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-50.html","name":"http://www.mozilla.org/security/announce/2006/mfsa2006-50.html","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"MFSA 2006-50: JavaScript engine vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","name":"SUSE-SA:2006:048","refsource":"SUSE","tags":[],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","name":"MDKSA-2006:146","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22342","name":"22342","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for mozilla - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","name":"MDKSA-2006:145","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21634","name":"21634","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Debian update for mozilla - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","name":"GLSA-200608-04","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla Thunderbird: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21358","name":"21358","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Gentoo update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016586","name":"1016586","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Firefox Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21631","name":"21631","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/327-1/","name":"USN-327-1","refsource":"UBUNTU","tags":[],"title":"USN-327-1: firefox vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-361-1","name":"USN-361-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-361-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1161","name":"DSA-1161","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-1161-2 mozilla-firefox","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","name":"RHSA-2006:0608","refsource":"REDHAT","tags":["Vendor Advisory"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","name":"GLSA-200608-03","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla Firefox: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3749","name":"ADV-2006-3749","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://secunia.com/advisories/21269","name":"21269","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Red Hat update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0058","name":"ADV-2007-0058","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21270","name":"21270","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Red Hat update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21275","name":"21275","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Ubuntu update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016588","name":"1016588","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Thunderbird Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3806","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3806","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"dev","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"dev","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3806","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2006-3806","ASSIGNER":"secalert@redhat.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified \"string function arguments.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_affected":"=","version_value":"n/a"}]}}]}}]}},"references":{"reference_data":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc","refsource":"MISC","name":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","refsource":"MISC","name":"http://rhn.redhat.com/errata/RHSA-2006-0609.html"},{"url":"http://secunia.com/advisories/19873","refsource":"MISC","name":"http://secunia.com/advisories/19873"},{"url":"http://secunia.com/advisories/21216","refsource":"MISC","name":"http://secunia.com/advisories/21216"},{"url":"http://secunia.com/advisories/21228","refsource":"MISC","name":"http://secunia.com/advisories/21228"},{"url":"http://secunia.com/advisories/21229","refsource":"MISC","name":"http://secunia.com/advisories/21229"},{"url":"http://secunia.com/advisories/21243","refsource":"MISC","name":"http://secunia.com/advisories/21243"},{"url":"http://secunia.com/advisories/21246","refsource":"MISC","name":"http://secunia.com/advisories/21246"},{"url":"http://secunia.com/advisories/21250","refsource":"MISC","name":"http://secunia.com/advisories/21250"},{"url":"http://secunia.com/advisories/21262","refsource":"MISC","name":"http://secunia.com/advisories/21262"},{"url":"http://secunia.com/advisories/21269","refsource":"MISC","name":"http://secunia.com/advisories/21269"},{"url":"http://secunia.com/advisories/21270","refsource":"MISC","name":"http://secunia.com/advisories/21270"},{"url":"http://secunia.com/advisories/21275","refsource":"MISC","name":"http://secunia.com/advisories/21275"},{"url":"http://secunia.com/advisories/21336","refsource":"MISC","name":"http://secunia.com/advisories/21336"},{"url":"http://secunia.com/advisories/21343","refsource":"MISC","name":"http://secunia.com/advisories/21343"},{"url":"http://secunia.com/advisories/21358","refsource":"MISC","name":"http://secunia.com/advisories/21358"},{"url":"http://secunia.com/advisories/21361","refsource":"MISC","name":"http://secunia.com/advisories/21361"},{"url":"http://secunia.com/advisories/21529","refsource":"MISC","name":"http://secunia.com/advisories/21529"},{"url":"http://secunia.com/advisories/21532","refsource":"MISC","name":"http://secunia.com/advisories/21532"},{"url":"http://secunia.com/advisories/21607","refsource":"MISC","name":"http://secunia.com/advisories/21607"},{"url":"http://secunia.com/advisories/21631","refsource":"MISC","name":"http://secunia.com/advisories/21631"},{"url":"http://secunia.com/advisories/21634","refsource":"MISC","name":"http://secunia.com/advisories/21634"},{"url":"http://secunia.com/advisories/21654","refsource":"MISC","name":"http://secunia.com/advisories/21654"},{"url":"http://secunia.com/advisories/21675","refsource":"MISC","name":"http://secunia.com/advisories/21675"},{"url":"http://secunia.com/advisories/22055","refsource":"MISC","name":"http://secunia.com/advisories/22055"},{"url":"http://secunia.com/advisories/22065","refsource":"MISC","name":"http://secunia.com/advisories/22065"},{"url":"http://secunia.com/advisories/22066","refsource":"MISC","name":"http://secunia.com/advisories/22066"},{"url":"http://secunia.com/advisories/22210","refsource":"MISC","name":"http://secunia.com/advisories/22210"},{"url":"http://secunia.com/advisories/22342","refsource":"MISC","name":"http://secunia.com/advisories/22342"},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","refsource":"MISC","name":"http://security.gentoo.org/glsa/glsa-200608-02.xml"},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","refsource":"MISC","name":"http://security.gentoo.org/glsa/glsa-200608-04.xml"},{"url":"http://securitytracker.com/id?1016586","refsource":"MISC","name":"http://securitytracker.com/id?1016586"},{"url":"http://securitytracker.com/id?1016587","refsource":"MISC","name":"http://securitytracker.com/id?1016587"},{"url":"http://securitytracker.com/id?1016588","refsource":"MISC","name":"http://securitytracker.com/id?1016588"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1","refsource":"MISC","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1"},{"url":"http://www.debian.org/security/2006/dsa-1159","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1159"},{"url":"http://www.debian.org/security/2006/dsa-1160","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1160"},{"url":"http://www.debian.org/security/2006/dsa-1161","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1161"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","refsource":"MISC","name":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146"},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-50.html","refsource":"MISC","name":"http://www.mozilla.org/security/announce/2006/mfsa2006-50.html"},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","refsource":"MISC","name":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0594.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0608.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0610.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0611.html"},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/441333/100/0/threaded"},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/446657/100/200/threaded"},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/446658/100/200/threaded"},{"url":"http://www.securityfocus.com/bid/19181","refsource":"MISC","name":"http://www.securityfocus.com/bid/19181"},{"url":"http://www.ubuntu.com/usn/usn-350-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-350-1"},{"url":"http://www.ubuntu.com/usn/usn-354-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-354-1"},{"url":"http://www.ubuntu.com/usn/usn-361-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-361-1"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html","refsource":"MISC","name":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html"},{"url":"http://www.vupen.com/english/advisories/2006/2998","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/2998"},{"url":"http://www.vupen.com/english/advisories/2006/3748","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/3748"},{"url":"http://www.vupen.com/english/advisories/2006/3749","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/3749"},{"url":"http://www.vupen.com/english/advisories/2008/0083","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2008/0083"},{"url":"https://issues.rpath.com/browse/RPL-536","refsource":"MISC","name":"https://issues.rpath.com/browse/RPL-536"},{"url":"https://issues.rpath.com/browse/RPL-537","refsource":"MISC","name":"https://issues.rpath.com/browse/RPL-537"},{"url":"https://usn.ubuntu.com/327-1/","refsource":"MISC","name":"https://usn.ubuntu.com/327-1/"},{"url":"https://usn.ubuntu.com/329-1/","refsource":"MISC","name":"https://usn.ubuntu.com/329-1/"},{"url":"http://www.vupen.com/english/advisories/2007/0058","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2007/0058"},{"url":"http://www.kb.cert.org/vuls/id/655892","refsource":"MISC","name":"http://www.kb.cert.org/vuls/id/655892"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27987","refsource":"MISC","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27987"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232","refsource":"MISC","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232"}]}},"nvd":{"publishedDate":"2006-07-27 19:04:00","lastModifiedDate":"2018-10-17 21:30:00","problem_types":["CWE-189"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3806","Ordinal":"19132","Title":"CVE-2006-3806","CVE":"CVE-2006-3806","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3806","Ordinal":"1","NoteData":"Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified \"string function arguments.\"","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3806","Ordinal":"2","NoteData":"2006-07-27","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3806","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}