What’s Vulnerable › Vulnerabilities

CVE-2006-1724

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-04-14 · updated 2026-06-16

Description

Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.

Affected products

• Debian Linux: 3.1
• Mozilla Firefox: from 1.0 before 1.0.8; from 1.5 before 1.5.0.2 — fixed in 1.0.8, 1.5.0.2
• Mozilla Suite: before 1.7.13 — fixed in 1.7.13
• Mozilla Seamonkey: before 1.0.1 — fixed in 1.0.1
• Mozilla Thunderbird: from 1.0 before 1.0.8; from 1.5 before 1.5.0.2 — fixed in 1.0.8, 1.5.0.2

How to fix

Upgrade to a fixed version: Mozilla Firefox 1.0.8, 1.5.0.2; Mozilla Suite 1.7.13; Mozilla Seamonkey 1.0.1; Mozilla Thunderbird 1.0.8, 1.5.0.2. Check the vendor advisory for mitigations.

References

• http://secunia.com/advisories/19631
• http://secunia.com/advisories/19649
• http://secunia.com/advisories/19696
• http://secunia.com/advisories/19714
• http://secunia.com/advisories/19780
• http://secunia.com/advisories/19863
• http://secunia.com/advisories/19941
• http://secunia.com/advisories/21033
• http://secunia.com/advisories/21622
• http://secunia.com/advisories/22065
• http://secunia.com/advisories/22066

Get alerted when CVE-2006-1724 or the next vulnerability affects your stack