← back
CVE-2006-3677observed exploitation

CVE-2006-3677

82Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 78%
from disclosure to weapon0 days
Published on NVDJul 27
1st PoCJul 25
metasploitJul 25
VulnCheck+1374d
exploitation probability
78%top 1% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/2082unverifiedexploitdbwww.exploit-db.com/exploits/16300unverifiedexploitdbwww.exploit-db.com/exploits/9946unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.aschttp://rhn.redhat.com/errata/RHSA-2006-0609.htmlhttp://secunia.com/advisories/19873http://secunia.com/advisories/21216http://secunia.com/advisories/21229http://secunia.com/advisories/21243http://secunia.com/advisories/21246http://secunia.com/advisories/21262http://secunia.com/advisories/21269http://secunia.com/advisories/21270http://secunia.com/advisories/21336http://secunia.com/advisories/21343