CVE-2006-6497: Mozilla Firefox

Medium severity, CVSS 6.8. EPSS: 4.4% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.

Affected products

• Mozilla Firefox: up to and including 1.5.0.8; version 2.0 only
• Mozilla Seamonkey: up to and including 1.5.0.8
• Mozilla Thunderbird: up to and including 1.5.0.8

Published 2006-12-20. Last modified 2026-06-16.