| Name | CVE-2006-3677 |
| Description | Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more) |
| NVD severity | high |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| firefox (PTS) | sid | 100.0-1 | fixed |
| thunderbird (PTS) | stretch | 1:68.10.0-1~deb9u1 | fixed |
| stretch (security) | 1:91.8.0-1~deb9u1 | fixed | |
| buster | 1:78.14.0-1~deb10u1 | fixed | |
| buster (security) | 1:91.8.0-1~deb10u1 | fixed | |
| bullseye | 1:78.14.0-1~deb11u1 | fixed | |
| bullseye (security) | 1:91.8.0-1~deb11u1 | fixed | |
| bookworm | 1:91.8.1-1 | fixed | |
| sid | 1:91.9.0-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| firefox | source | (unstable) | 1.5.dfsg+1.5.0.5-1 | high | ||
| mozilla | source | (unstable) | (not affected) | |||
| mozilla-firefox | source | (unstable) | (not affected) | |||
| mozilla-thunderbird | source | (unstable) | (not affected) | |||
| thunderbird | source | (unstable) | (not affected) | |||
| xulrunner | source | (unstable) | 1.8.0.5-1 | high |
MFSA-2006-45
- mozilla <not-affected> (mozilla 1.7 not affected)
- mozilla-firefox <not-affected> (only firefox >= 1.5)