CVE-2006-2781

中危 6.4CVE-2006-2781 · Published 02/06/2006 · updated 16/06/2026

要点

CVE-2006-2781 是影响 seamonkey (mozilla), thunderbird (mozilla) 的中危 (CVSS 6.4)漏洞。
未来 30 天内被利用的概率（EPSS）：3.3%，高于 88.6% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
seamonkey mozilla	`≤ 1.0.1`	No fix yet
thunderbird mozilla	`≤ 1.5.0.3`	No fix yet

Description

Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.

References

rhn.redhat.com/errata/RHSA-2006-0609.html
secunia.com/advisories/20382 · Vendor Advisory
secunia.com/advisories/20394 · Vendor Advisory
secunia.com/advisories/20709 · Vendor Advisory
secunia.com/advisories/21134 · Vendor Advisory
secunia.com/advisories/21178 · Vendor Advisory
secunia.com/advisories/21183 · Vendor Advisory
secunia.com/advisories/21210 · Vendor Advisory
secunia.com/advisories/21269 · Vendor Advisory
secunia.com/advisories/21324 · Vendor Advisory
secunia.com/advisories/21336 · Vendor Advisory
secunia.com/advisories/21607 · Vendor Advisory
secunia.com/advisories/21631 · Vendor Advisory
secunia.com/advisories/22065 · Vendor Advisory

seamonkey 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

seamonkey

mozilla

≤ 1.0.1

No fix yet

thunderbird

mozilla

≤ 1.5.0.3

No fix yet

seamonkey 的其他漏洞

查看全部 →