VULNERABILITY INTELLIGENCE

CVE-2006-0295

CVSS score5.1 MEDIUM
EPSS probability71.31%
CISA KEVNot currently listed
Published2006-02-02
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.

Primary references