CVE-2006-5159

Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScript. NOTE: the vendor and original researchers have released a follow-up comment disputing the severity of this issue, in which the researcher states that "we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this... I have not succeeded in making this code do anything more than cause a crash and eat up system resources"

• http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/
• http://securityreason.com/securityalert/1678
• http://securitytracker.com/id?1016962
• http://www.securityfocus.com/archive/1/447493/100/0/threaded
• http://www.securityfocus.com/archive/1/447497/100/0/threaded
• http://www.securityfocus.com/bid/20282
• http://www.securityfocus.com/bid/20294
• http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29317
• http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/
• http://securityreason.com/securityalert/1678
• http://securitytracker.com/id?1016962
• http://www.securityfocus.com/archive/1/447493/100/0/threaded
• http://www.securityfocus.com/archive/1/447497/100/0/threaded
• http://www.securityfocus.com/bid/20282
• http://www.securityfocus.com/bid/20294
• http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29317

Published

Oct 5, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5153The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio…
• CVE-2006-5154PHP remote file inclusion vulnerability in cp/sig.php in Del…
• CVE-2006-5155PHP remote file inclusion vulnerability in core/pdf.php in V…
• CVE-2006-5156Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.…
• CVE-2006-5157Format string vulnerability in the ActiveX control (ATXCONSO…
• CVE-2006-5158The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux…7.5
• CVE-2006-5160Multiple unspecified vulnerabilities in Mozilla Firefox have…8.1
• CVE-2006-5161IBM Client Security Password Manager stores and distributes …
• CVE-2006-5162wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earli…
• CVE-2006-5163IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and po…
• CVE-2006-5164Multiple cross-site scripting (XSS) vulnerabilities in cart.…
• CVE-2006-5165PHP remote file inclusion vulnerability in inc/functions.inc…