CVE-2006-2777: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days.

Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.

Affected products

• Mozilla Firefox: up to and including 1.5.0.3; version 0.8 only; version 0.9 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; …
• Mozilla Seamonkey: up to and including 1.0; version 1.0 only

Published 2006-06-02. Last modified 2026-06-16.