CVE-2006-2775: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL.

Affected products

• Mozilla Firefox: up to and including 1.5.0.3; version 0.8 only; version 0.9 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; …
• Mozilla Thunderbird: up to and including 1.5.0.1; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2006-06-02. Last modified 2026-06-16.