CVE-2006-2781: Mozilla Seamonkey

Medium severity, CVSS 6.4. EPSS: 3.3% chance of exploitation in the next 30 days.

Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.

Affected products

• Mozilla Seamonkey: up to and including 1.0.1
• Mozilla Thunderbird: up to and including 1.5.0.3

Published 2006-06-02. Last modified 2026-06-16.