What’s Vulnerable › Vulnerabilities

CVE-2006-2776

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-06-02 · updated 2026-06-16

Description

Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.

Affected products

• Mozilla Firefox: 0.8, 0.9, 0.9-rc, 0.9.1, 0.9.2, 0.9.3 (+16)
• Mozilla Thunderbird: 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+18)

References

• http://rhn.redhat.com/errata/RHSA-2006-0609.html
• http://secunia.com/advisories/20376
• http://secunia.com/advisories/20382
• http://secunia.com/advisories/20561
• http://secunia.com/advisories/20709
• http://secunia.com/advisories/21134
• http://secunia.com/advisories/21176
• http://secunia.com/advisories/21178
• http://secunia.com/advisories/21183
• http://secunia.com/advisories/21188
• http://secunia.com/advisories/21210
• http://secunia.com/advisories/21269

Get alerted when CVE-2006-2776 or the next vulnerability affects your stack