CVE-2006-0295
NoneCVSS
—
EPSS
71.3%
Published
Feb 2, 2006
CISA due date
—
The record
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:12 | thunderbird | 0 | 1.5.0.2-1 |
| Debian:13 | thunderbird | 0 | 1.5.0.2-1 |
Related vulnerabilities
- CVE-2025-0242 Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox… Also affects thunderbird
- CVE-2024-9680 An attacker was able to achieve code execution in the content process by exploiting a… Also affects thunderbird
- CVE-2024-4367 A type check was missing when handling fonts in PDF.js, which would allow arbitrary… Also affects thunderbird
- CVE-2024-34342 react-pdf displays PDFs in React apps. Also affects thunderbird
- CVE-2023-6856 The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when… Also affects thunderbird
- CVE-2023-4050 In some cases, an untrusted input stream was copied to a stack buffer without checking… Also affects thunderbird
- CVE-2022-2200 If an object prototype was corrupted by an attacker, they would have been able to set… Also affects thunderbird
- CVE-2022-26485 Removing an XSLT parameter during processing could have lead to an exploitable… Also affects thunderbird