CVE-2006-0295

Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.

• http://secunia.com/advisories/18700
• http://secunia.com/advisories/18704
• http://secunia.com/advisories/22065
• http://securitytracker.com/id?1015570
• http://www.kb.cert.org/vuls/id/759273US Government Resource
• http://www.mozilla.org/security/announce/2006/mfsa2006-04.html
• http://www.securityfocus.com/archive/1/446657/100/200/threaded
• http://www.securityfocus.com/bid/16476
• http://www.us-cert.gov/cas/techalerts/TA06-038A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/0413
• http://www.vupen.com/english/advisories/2006/3749
• https://bugzilla.mozilla.org/show_bug.cgi?id=319296Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24433
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562
• http://secunia.com/advisories/18700
• http://secunia.com/advisories/18704
• http://secunia.com/advisories/22065
• http://securitytracker.com/id?1015570
• http://www.kb.cert.org/vuls/id/759273US Government Resource
• http://www.mozilla.org/security/announce/2006/mfsa2006-04.html
• http://www.securityfocus.com/archive/1/446657/100/200/threaded
• http://www.securityfocus.com/bid/16476
• http://www.us-cert.gov/cas/techalerts/TA06-038A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/0413
• http://www.vupen.com/english/advisories/2006/3749
• https://bugzilla.mozilla.org/show_bug.cgi?id=319296Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24433
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562

Published

Feb 2, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0289Multiple unspecified vulnerabilities in Oracle Application S…
• CVE-2006-0290Unspecified vulnerability in Oracle Database Server 9.2.0.7,…
• CVE-2006-0291Multiple unspecified vulnerabilities in Oracle Database Serv…
• CVE-2006-0292The Javascript interpreter (jsinterp.c) in Mozilla and Firef…
• CVE-2006-0293The function allocation code (js_NewFunction in jsfun.c) in …
• CVE-2006-0294Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running J…
• CVE-2006-0296The XULDocument.persist function in Mozilla, Firefox before …
• CVE-2006-0297Multiple integer overflows in Mozilla Firefox 1.5, Thunderbi…
• CVE-2006-0298The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonk…
• CVE-2006-0299The E4X implementation in Mozilla Firefox before 1.5.0.1, Th…
• CVE-2006-0300Buffer overflow in tar 1.14 through 1.15.90 allows user-assi…
• CVE-2006-0301Heap-based buffer overflow in Splash.cc in xpdf, as used in …