CVE-2006-0748

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-14 · updated 2026-06-16
Weakness: CWE-399

Description

Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via "an invalid and non-sensical ordering of table-related tags" that results in a negative array index.

Affected products

Mozilla Firefox: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+7)
Mozilla Seamonkey: 1.0, 1.0-beta
Mozilla Thunderbird: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+6)

References

http://secunia.com/advisories/19759
http://secunia.com/advisories/19794
http://secunia.com/advisories/19811
http://secunia.com/advisories/19821
http://secunia.com/advisories/19823
http://secunia.com/advisories/19852
http://secunia.com/advisories/19862
http://secunia.com/advisories/19863
http://secunia.com/advisories/19902
http://secunia.com/advisories/19941

Get alerted when CVE-2006-0748 or the next vulnerability affects your stack