CVE Descriptions

Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.

CVE Informations

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Mozilla>>Firefox >> Version To (including) 1.5.0.8

Mozilla>>Firefox >> Version 2.0

Mozilla>>Seamonkey >> Version To (including) 1.5.0.8

Mozilla>>Thunderbird >> Version To (including) 1.5.0.8

References

http://www.kb.cert.org/vuls/id/606260
Tags : third-party-advisory, x_refsource_CERT-VN

http://www.securityfocus.com/bid/21668
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/23433
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102885-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.mandriva.com/security/advisories?name=MDKSA-2007:010
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/24948
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23439
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23672
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/5068
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/23468
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11691
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/23598
Tags : third-party-advisory, x_refsource_SECUNIA

http://rhn.redhat.com/errata/RHSA-2006-0758.html
Tags : vendor-advisory, x_refsource_REDHAT

http://securitytracker.com/id?1017398
Tags : vdb-entry, x_refsource_SECTRACK

http://www.debian.org/security/2007/dsa-1265
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/24078
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23692
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-398-2
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/23282
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/24390
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mozilla.org/security/announce/2006/mfsa2006-68.html
Tags : x_refsource_CONFIRM

http://fedoranews.org/cms/node/2297
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/23422
Tags : third-party-advisory, x_refsource_SECUNIA

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/23591
Tags : third-party-advisory, x_refsource_SECUNIA

http://securitytracker.com/id?1017405
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/23614
Tags : third-party-advisory, x_refsource_SECUNIA

http://securitytracker.com/id?1017406
Tags : vdb-entry, x_refsource_SECTRACK

http://rhn.redhat.com/errata/RHSA-2006-0759.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.ubuntu.com/usn/usn-398-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.vupen.com/english/advisories/2008/0083
Tags : vdb-entry, x_refsource_VUPEN

http://fedoranews.org/cms/node/2338
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/23420
Tags : third-party-advisory, x_refsource_SECUNIA

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc
Tags : vendor-advisory, x_refsource_SGI

http://secunia.com/advisories/23440
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.novell.com/linux/security/advisories/2006_80_mozilla.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securityfocus.com/archive/1/455145/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.kb.cert.org/vuls/id/427972
Tags : third-party-advisory, x_refsource_CERT-VN

http://secunia.com/advisories/23545
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23618
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www.us-cert.gov/cas/techalerts/TA06-354A.html
Tags : third-party-advisory, x_refsource_CERT

http://secunia.com/advisories/23589
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2007/dsa-1253
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.debian.org/security/2007/dsa-1258
Tags : vendor-advisory, x_refsource_DEBIAN

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Tags : vendor-advisory, x_refsource_HP

https://issues.rpath.com/browse/RPL-883
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/455728/100/200/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.novell.com/linux/security/advisories/2007_06_mozilla.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/23601
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23988
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDKSA-2007:011
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.vupen.com/english/advisories/2007/1463
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/23514
Tags : third-party-advisory, x_refsource_SECUNIA

http://security.gentoo.org/glsa/glsa-200701-02.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://rhn.redhat.com/errata/RHSA-2006-0760.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.ubuntu.com/usn/usn-400-1
Tags : vendor-advisory, x_refsource_UBUNTU

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	6.6%	–	–
2022-04-03	–	–	6.6%	–	–
2023-02-26	–	–	6.6%	–	–
2023-03-12	–	–	–	28.45%	–
2023-04-16	–	–	–	35.48%	–
2023-04-30	–	–	–	35.48%	–
2023-05-07	–	–	–	35.48%	–
2023-05-28	–	–	–	42.31%	–
2023-07-02	–	–	–	35.11%	–
2023-08-13	–	–	–	40.51%	–
2023-09-17	–	–	–	75.06%	–
2023-10-29	–	–	–	73.26%	–
2023-12-03	–	–	–	78.79%	–
2024-03-31	–	–	–	79.91%	–
2024-06-02	–	–	–	79.91%	–
2024-12-22	–	–	–	84.24%	–
2025-01-19	–	–	–	84.24%	–
2025-03-18	–	–	–	–	13.04%
2025-03-30	–	–	–	–	13.04%
2025-04-11	–	–	–	–	13.04%
2025-04-12	–	–	–	–	13.04%
2025-04-15	–	–	–	–	13.04%
2025-08-08	–	–	–	–	13.48%
2025-09-16	–	–	–	–	11.21%
2026-04-12	–	–	–	–	11.21%

Date	Percentile
2022-02-06	79%
2022-04-03	91%
2023-02-26	92%
2023-03-12	96%
2023-04-16	97%
2023-04-30	96%
2023-05-07	97%
2023-05-28	97%
2023-07-02	97%
2023-08-13	97%
2023-09-17	98%
2023-10-29	98%
2023-12-03	98%
2024-03-31	98%
2024-06-02	98%
2024-12-22	99%
2025-01-19	99%
2025-03-18	94%
2025-03-30	93%
2025-04-11	94%
2025-04-12	93%
2025-04-15	94%
2025-08-08	94%
2025-09-16	93%
2026-04-12	94%

CVE-2006-6497 : Detail

CVE-2006-6497