CVE-2006-0295: Mozilla Firefox

Medium severity, CVSS 5.1. EPSS: 71.3% chance of exploitation in the next 30 days.

Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.

Affected products

• Mozilla Firefox: version 1.5 only
• Mozilla Seamonkey: version 1.0 only
• Mozilla Thunderbird: version 1.5 only

Published 2006-02-02. Last modified 2026-06-16.