CVE-2006-6505: Mozilla Seamonkey

Medium severity, CVSS 6.8. EPSS: 4.4% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via (1) external message modies with long Content-Type headers or (2) long RFC2047-encoded (MIME non-ASCII) headers.

Affected products

• Mozilla Seamonkey: up to and including 1.0.6
• Mozilla Thunderbird: up to and including 1.5.0.8

Published 2006-12-20. Last modified 2026-06-16.