CVE-2006-4565: Mozilla Firefox

High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."

Affected products

• Mozilla Firefox: up to and including 1.5.0.6
• Mozilla Seamonkey: up to and including 1.0.4
• Mozilla Thunderbird: up to and including 1.5.0.6

Published 2006-09-15. Last modified 2026-06-16.