Read the docs
TI-2006-06244 Aliases CVE-2006-6499GHSA-636h-f5g9-p45x

The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9…

Priority LOW 27CWE-835Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-835.

Summary

The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.

Why it matters now

EPSS 0.03939 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*1.5 to before 1.5.0.9; 2.0 to before 2.0.0.1VulnerableMozilla
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*before 1.0.7VulnerableMozilla
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*before 1.5.0.9VulnerableMozilla
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*4.0VulnerableDebian
cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*5.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*6.06VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*6.10VulnerableCanonical
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* Versions 1.5 to before 1.5.0.9; 2.0 to before 2.0.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* Versions before 1.0.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* Versions before 1.5.0.9 Vulnerable ·Mozilla
  • cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Debian
  • cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:* Versions 5.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:* Versions 6.06 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:* Versions 6.10 Vulnerable ·Canonical

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-6499
  2. 2026-10-03 Alias added: GHSA-636h-f5g9-p45x

References

Advisory 18

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences