CVE-2006-2781

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-02 · updated 2026-06-16
Weakness: CWE-119

Description

Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.

Affected products

Mozilla Seamonkey: through 1.0.1
Mozilla Thunderbird: through 1.5.0.3

References

http://rhn.redhat.com/errata/RHSA-2006-0609.html
http://secunia.com/advisories/20382
http://secunia.com/advisories/20394
http://secunia.com/advisories/20709
http://secunia.com/advisories/21134
http://secunia.com/advisories/21178
http://secunia.com/advisories/21183
http://secunia.com/advisories/21210
http://secunia.com/advisories/21269
http://secunia.com/advisories/21324
http://secunia.com/advisories/21336
http://secunia.com/advisories/21607

Get alerted when CVE-2006-2781 or the next vulnerability affects your stack