{"api_version":"1","generated_at":"2026-07-23T09:34:41+00:00","cve":"CVE-2006-5159","urls":{"html":"https://cve.report/CVE-2006-5159","api":"https://cve.report/api/cve/CVE-2006-5159.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-5159","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5159"},"summary":{"title":"CVE-2006-5159","description":"Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScript.  NOTE: the vendor and original researchers have released a follow-up comment disputing the severity of this issue, in which the researcher states that \"we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this... I have not succeeded in making this code do anything more than cause a crash and eat up system resources\"","state":"PUBLISHED","assigner":"mitre","published_at":"2006-10-05 04:04:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/20294","name":"http://www.securityfocus.com/bid/20294","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"RETIRED: Mozilla Firefox Multiple Unspecified Javascript Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/1678","name":"http://securityreason.com/securityalert/1678","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - 0day in Firefox from ToorCon '06","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/","name":"http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Mozilla Developer News  » Blog Archive   » Update: Possible Vulnerability Reported at Toorcon","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html","name":"http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityProNews - WebProNews","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29317","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29317","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/447493/100/0/threaded","name":"http://www.securityfocus.com/archive/1/447493/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/447497/100/0/threaded","name":"http://www.securityfocus.com/archive/1/447497/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20282","name":"http://www.securityfocus.com/bid/20282","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Mozilla Firefox Unspecified Javascript Remote Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1016962","name":"http://securitytracker.com/id?1016962","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Mozilla Firefox Unspecified Stack Overflow in Processing JavaScript Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-5159","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5159","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"0.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"0.10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"0.9","cpe7":"rc","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"0.9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"0.9.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"0.9.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"2.0","cpe7":"beta_1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"preview_release","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2006-5159","organization":"Red Hat","lastmodified":"2006-10-16","contributor":"Joshua Bressers","statementText":"Red Hat does not consider this issue to be a security vulnerability. We have been in contact with the upstream project regarding this problem and agree that this issue currently poses no security threat. In the event more information becomes available, we will revisit this issue in the future.","cve_year":"2006","cve_id":"5159","crc32":"9fe06817"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T19:41:04.230Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"firefox-multiple-javascript-bo(29317)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29317"},{"name":"20282","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/20282"},{"name":"1016962","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1016962"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/"},{"name":"20061001 0day in Firefox from ToorCon '06","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/447497/100/0/threaded"},{"name":"1678","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/1678"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html"},{"name":"20061001 zero-day flaws in Firefox: about 30 unpatched Firefox flaws","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/447493/100/0/threaded"},{"name":"20294","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/20294"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-09-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScript.  NOTE: the vendor and original researchers have released a follow-up comment disputing the severity of this issue, in which the researcher states that \"we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this... I have not succeeded in making this code do anything more than cause a crash and eat up system resources\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"firefox-multiple-javascript-bo(29317)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29317"},{"name":"20282","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/20282"},{"name":"1016962","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1016962"},{"tags":["x_refsource_MISC"],"url":"http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/"},{"name":"20061001 0day in Firefox from ToorCon '06","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/447497/100/0/threaded"},{"name":"1678","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/1678"},{"tags":["x_refsource_MISC"],"url":"http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html"},{"name":"20061001 zero-day flaws in Firefox: about 30 unpatched Firefox flaws","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/447493/100/0/threaded"},{"name":"20294","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/20294"}],"tags":["disputed"],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5159","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"** DISPUTED **  Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScript.  NOTE: the vendor and original researchers have released a follow-up comment disputing the severity of this issue, in which the researcher states that \"we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this... I have not succeeded in making this code do anything more than cause a crash and eat up system resources\"."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"firefox-multiple-javascript-bo(29317)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29317"},{"name":"20282","refsource":"BID","url":"http://www.securityfocus.com/bid/20282"},{"name":"1016962","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016962"},{"name":"http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/","refsource":"MISC","url":"http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/"},{"name":"20061001 0day in Firefox from ToorCon '06","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/447497/100/0/threaded"},{"name":"1678","refsource":"SREASON","url":"http://securityreason.com/securityalert/1678"},{"name":"http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html","refsource":"MISC","url":"http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html"},{"name":"20061001 zero-day flaws in Firefox: about 30 unpatched Firefox flaws","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/447493/100/0/threaded"},{"name":"20294","refsource":"BID","url":"http://www.securityfocus.com/bid/20294"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-5159","datePublished":"2006-10-03T23:00:00.000Z","dateReserved":"2006-10-03T00:00:00.000Z","dateUpdated":"2024-08-07T19:41:04.230Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-10-05 04:04:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*","matchCriteriaId":"CFDBA992-46F8-42A6-9428-C9E475CA69E3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"5159","Ordinal":"1","Title":"CVE-2006-5159","CVE":"CVE-2006-5159","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"5159","Ordinal":"1","NoteData":"Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScript.  NOTE: the vendor and original researchers have released a follow-up comment disputing the severity of this issue, in which the researcher states that \"we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this... I have not succeeded in making this code do anything more than cause a crash and eat up system resources\"","Type":"Description","Title":"CVE-2006-5159"},{"CveYear":"2006","CveId":"5159","Ordinal":"2","NoteData":"2006-10-03","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"5159","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}