VULNERABILITY INTELLIGENCE
CVE-2006-2778
CVSS score5 MEDIUM
EPSS probability4.91%
CISA KEVNot currently listed
Published2006-06-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.