CVE-2006-2538: Ie Tab

Low severity, CVSS 2.6. EPSS: 1.9% chance of exploitation in the next 30 days.

IE Tab 1.0.9 plugin for Mozilla Firefox 1.5.0.3 allows remote user-assisted attackers to cause a denial of service (application crash), possibly due to a null dereference, via certain Javascript, as demonstrated using a url parameter to the content/reloaded.html page in a chrome:// URI. Some third-party researchers claim that they are unable to reproduce this vulnerability.

Affected products

  • Ie Tab Ie Tab: version 1.0.9 only
  • Mozilla Firefox: version 1.5.0.3 only

Published 2006-05-22. Last modified 2026-06-16.