{"api_version":"1","generated_at":"2026-07-23T11:10:23+00:00","cve":"CVE-2006-3811","urls":{"html":"https://cve.report/CVE-2006-3811","api":"https://cve.report/api/cve/CVE-2006-3811.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3811","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3811"},"summary":{"title":"CVE-2006-3811","description":"Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) \"anonymous box selectors outside of UA stylesheets,\" (5) stale references to \"removed nodes,\" and (6) running the crypto.generateCRMFRequest callback on deleted context.","state":"PUBLIC","assigner":"secalert@redhat.com","published_at":"2006-07-27 20:04:00","updated_at":"2018-10-17 21:31:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://www.vupen.com/english/advisories/2007/2350","name":"ADV-2007-2350","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://secunia.com/advisories/21675","name":"21675","refsource":"SECUNIA","tags":[],"title":"Debian update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.rpath.com/browse/RPL-537","name":"https://issues.rpath.com/browse/RPL-537","refsource":"CONFIRM","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"503"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","name":"RHSA-2006:0609","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/19873","name":"19873","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla Firefox Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/329-1/","name":"USN-329-1","refsource":"UBUNTU","tags":[],"title":"USN-329-1: Thunderbird vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-350-1","name":"USN-350-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-350-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","name":"SSRT061181","refsource":"HP","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21228","name":"21228","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla Thunderbird Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.rpath.com/browse/RPL-536","name":"https://issues.rpath.com/browse/RPL-536","refsource":"CONFIRM","tags":[],"title":"[#RPL-536] update firefox to 1.5.0.5 for security issues - rPath JIRA","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/22066","name":"22066","refsource":"SECUNIA","tags":[],"title":"HP-UX update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","name":"SSRT061236","refsource":"HP","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016587","name":"1016587","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Seamonkey Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21343","name":"21343","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Gentoo update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/2998","name":"ADV-2006-2998","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://secunia.com/advisories/21229","name":"21229","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla SeaMonkey Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19181","name":"19181","refsource":"BID","tags":["Patch"],"title":"Mozilla Multiple Products Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html","name":"TA06-208A","refsource":"CERT","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA06-208A -- Mozilla Products Contain Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","name":"RHSA-2006:0611","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22055","name":"22055","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9934","name":"oval:org.mitre.oval:def:9934","refsource":"OVAL","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","name":"MDKSA-2006:143","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21529","name":"21529","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"SUSE update for MozillaFirefox, MozillaThunderbird, and Seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-354-1","name":"USN-354-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-354-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/21336","name":"21336","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1","name":"102971","refsource":"SUNALERT","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27992","name":"mozilla-multiple-memory-corruption(27992)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://www.vupen.com/english/advisories/2008/0083","name":"ADV-2008-0083","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","name":"20060727 rPSA-2006-0137-1 firefox","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-55.html","name":"http://www.mozilla.org/security/announce/2006/mfsa2006-55.html","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"MFSA 2006-55: Crashes with evidence of memory corruption (rv:1.8.0.5)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22210","name":"22210","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21243","name":"21243","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21216","name":"21216","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"rPath update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21532","name":"21532","refsource":"SECUNIA","tags":[],"title":"Mandriva update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3748","name":"ADV-2006-3748","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21361","name":"21361","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Gentoo update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","name":"RHSA-2006:0610","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21246","name":"21246","refsource":"SECUNIA","tags":[],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","name":"RHSA-2006:0594","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21607","name":"21607","refsource":"SECUNIA","tags":[],"title":"Mandriva update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/25839","name":"25839","refsource":"SECUNIA","tags":[],"title":"Sun Solaris Mozilla 1.7 Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22065","name":"22065","refsource":"SECUNIA","tags":[],"title":"HP-UX update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21262","name":"21262","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"SGI Advanced Linux Environment Multiple Updates - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","name":"GLSA-200608-02","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla SeaMonkey: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21250","name":"21250","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"rPath update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc","name":"20060703-01-P","refsource":"SGI","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","name":"SUSE-SA:2006:048","refsource":"SUSE","tags":[],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","name":"MDKSA-2006:146","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22342","name":"22342","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for mozilla - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","name":"MDKSA-2006:145","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","name":"GLSA-200608-04","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla Thunderbird: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21358","name":"21358","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Gentoo update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016586","name":"1016586","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Firefox Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21631","name":"21631","refsource":"SECUNIA","tags":[],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/327-1/","name":"USN-327-1","refsource":"UBUNTU","tags":[],"title":"USN-327-1: firefox vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-361-1","name":"USN-361-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-361-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1161","name":"DSA-1161","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-1161-2 mozilla-firefox","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","name":"RHSA-2006:0608","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","name":"GLSA-200608-03","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla Firefox: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3749","name":"ADV-2006-3749","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://www.kb.cert.org/vuls/id/527676","name":"VU#527676","refsource":"CERT-VN","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#527676","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21269","name":"21269","refsource":"SECUNIA","tags":[],"title":"Red Hat update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21270","name":"21270","refsource":"SECUNIA","tags":[],"title":"Red Hat update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21275","name":"21275","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016588","name":"1016588","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Thunderbird Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3811","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3811","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"dev","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"dev","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2006-3811","ASSIGNER":"secalert@redhat.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) \"anonymous box selectors outside of UA stylesheets,\" (5) stale references to \"removed nodes,\" and (6) running the crypto.generateCRMFRequest callback on deleted context."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_affected":"=","version_value":"n/a"}]}}]}}]}},"references":{"reference_data":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc","refsource":"MISC","name":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","refsource":"MISC","name":"http://rhn.redhat.com/errata/RHSA-2006-0609.html"},{"url":"http://secunia.com/advisories/19873","refsource":"MISC","name":"http://secunia.com/advisories/19873"},{"url":"http://secunia.com/advisories/21216","refsource":"MISC","name":"http://secunia.com/advisories/21216"},{"url":"http://secunia.com/advisories/21228","refsource":"MISC","name":"http://secunia.com/advisories/21228"},{"url":"http://secunia.com/advisories/21229","refsource":"MISC","name":"http://secunia.com/advisories/21229"},{"url":"http://secunia.com/advisories/21243","refsource":"MISC","name":"http://secunia.com/advisories/21243"},{"url":"http://secunia.com/advisories/21246","refsource":"MISC","name":"http://secunia.com/advisories/21246"},{"url":"http://secunia.com/advisories/21250","refsource":"MISC","name":"http://secunia.com/advisories/21250"},{"url":"http://secunia.com/advisories/21262","refsource":"MISC","name":"http://secunia.com/advisories/21262"},{"url":"http://secunia.com/advisories/21269","refsource":"MISC","name":"http://secunia.com/advisories/21269"},{"url":"http://secunia.com/advisories/21270","refsource":"MISC","name":"http://secunia.com/advisories/21270"},{"url":"http://secunia.com/advisories/21275","refsource":"MISC","name":"http://secunia.com/advisories/21275"},{"url":"http://secunia.com/advisories/21336","refsource":"MISC","name":"http://secunia.com/advisories/21336"},{"url":"http://secunia.com/advisories/21343","refsource":"MISC","name":"http://secunia.com/advisories/21343"},{"url":"http://secunia.com/advisories/21358","refsource":"MISC","name":"http://secunia.com/advisories/21358"},{"url":"http://secunia.com/advisories/21361","refsource":"MISC","name":"http://secunia.com/advisories/21361"},{"url":"http://secunia.com/advisories/21529","refsource":"MISC","name":"http://secunia.com/advisories/21529"},{"url":"http://secunia.com/advisories/21532","refsource":"MISC","name":"http://secunia.com/advisories/21532"},{"url":"http://secunia.com/advisories/21607","refsource":"MISC","name":"http://secunia.com/advisories/21607"},{"url":"http://secunia.com/advisories/21631","refsource":"MISC","name":"http://secunia.com/advisories/21631"},{"url":"http://secunia.com/advisories/21675","refsource":"MISC","name":"http://secunia.com/advisories/21675"},{"url":"http://secunia.com/advisories/22055","refsource":"MISC","name":"http://secunia.com/advisories/22055"},{"url":"http://secunia.com/advisories/22065","refsource":"MISC","name":"http://secunia.com/advisories/22065"},{"url":"http://secunia.com/advisories/22066","refsource":"MISC","name":"http://secunia.com/advisories/22066"},{"url":"http://secunia.com/advisories/22210","refsource":"MISC","name":"http://secunia.com/advisories/22210"},{"url":"http://secunia.com/advisories/22342","refsource":"MISC","name":"http://secunia.com/advisories/22342"},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","refsource":"MISC","name":"http://security.gentoo.org/glsa/glsa-200608-02.xml"},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","refsource":"MISC","name":"http://security.gentoo.org/glsa/glsa-200608-04.xml"},{"url":"http://securitytracker.com/id?1016586","refsource":"MISC","name":"http://securitytracker.com/id?1016586"},{"url":"http://securitytracker.com/id?1016587","refsource":"MISC","name":"http://securitytracker.com/id?1016587"},{"url":"http://securitytracker.com/id?1016588","refsource":"MISC","name":"http://securitytracker.com/id?1016588"},{"url":"http://www.debian.org/security/2006/dsa-1161","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1161"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","refsource":"MISC","name":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146"},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","refsource":"MISC","name":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0594.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0608.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0610.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0611.html"},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/441333/100/0/threaded"},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/446657/100/200/threaded"},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/446658/100/200/threaded"},{"url":"http://www.securityfocus.com/bid/19181","refsource":"MISC","name":"http://www.securityfocus.com/bid/19181"},{"url":"http://www.ubuntu.com/usn/usn-350-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-350-1"},{"url":"http://www.ubuntu.com/usn/usn-354-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-354-1"},{"url":"http://www.ubuntu.com/usn/usn-361-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-361-1"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html","refsource":"MISC","name":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html"},{"url":"http://www.vupen.com/english/advisories/2006/2998","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/2998"},{"url":"http://www.vupen.com/english/advisories/2006/3748","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/3748"},{"url":"http://www.vupen.com/english/advisories/2006/3749","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/3749"},{"url":"http://www.vupen.com/english/advisories/2008/0083","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2008/0083"},{"url":"https://issues.rpath.com/browse/RPL-536","refsource":"MISC","name":"https://issues.rpath.com/browse/RPL-536"},{"url":"https://issues.rpath.com/browse/RPL-537","refsource":"MISC","name":"https://issues.rpath.com/browse/RPL-537"},{"url":"https://usn.ubuntu.com/327-1/","refsource":"MISC","name":"https://usn.ubuntu.com/327-1/"},{"url":"https://usn.ubuntu.com/329-1/","refsource":"MISC","name":"https://usn.ubuntu.com/329-1/"},{"url":"http://secunia.com/advisories/25839","refsource":"MISC","name":"http://secunia.com/advisories/25839"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1","refsource":"MISC","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1"},{"url":"http://www.kb.cert.org/vuls/id/527676","refsource":"MISC","name":"http://www.kb.cert.org/vuls/id/527676"},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-55.html","refsource":"MISC","name":"http://www.mozilla.org/security/announce/2006/mfsa2006-55.html"},{"url":"http://www.vupen.com/english/advisories/2007/2350","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2007/2350"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27992","refsource":"MISC","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27992"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9934","refsource":"MISC","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9934"}]}},"nvd":{"publishedDate":"2006-07-27 20:04:00","lastModifiedDate":"2018-10-17 21:31:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3811","Ordinal":"19137","Title":"CVE-2006-3811","CVE":"CVE-2006-3811","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3811","Ordinal":"1","NoteData":"Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) \"anonymous box selectors outside of UA stylesheets,\" (5) stale references to \"removed nodes,\" and (6) running the crypto.generateCRMFRequest callback on deleted context.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3811","Ordinal":"2","NoteData":"2006-07-27","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3811","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}