UnratedFix available
firefox-esr — security advisory
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.
- Products
- firefox-esr
- Affected versions
- Not specified
- Fixed versions
- 45.0esr-1
- CVEs
- CVE-2006-6501
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 20:16 UTC · Revision 1
Source evidence
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.
osv:DEBIAN-CVE-2006-6501
firefox-esr
Fixed versions: 45.0esr-1
firefox-esr
Fixed versions: 45.0esr-1
firefox-esr
Fixed versions: 45.0esr-1
Complete source record
{
"id": "71f435998b33390872634f41907bf1540e59c98c0a71c22266aa02e00e724808",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2006-6501",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2006-6501",
"summary": "Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.",
"evidence": "osv:DEBIAN-CVE-2006-6501",
"products": [
{
"name": {
"value": "firefox-esr",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "45.0esr-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "firefox-esr",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "45.0esr-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "firefox-esr",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "45.0esr-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2006-6501",
"aliases": [
"DEBIAN-CVE-2006-6501"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "45.0esr-1"
}
]
}
],
"package": {
"name": "firefox-esr",
"purl": "pkg:deb/debian/firefox-esr?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-6501.json"
},
"ecosystem_specific": {
"urgency": "high"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "45.0esr-1"
}
]
}
],
"package": {
"name": "firefox-esr",
"purl": "pkg:deb/debian/firefox-esr?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-6501.json"
},
"ecosystem_specific": {
"urgency": "high"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "45.0esr-1"
}
]
}
],
"package": {
"name": "firefox-esr",
"purl": "pkg:deb/debian/firefox-esr?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-6501.json"
},
"ecosystem_specific": {
"urgency": "high"
}
}
],
"modified": "2026-10-22T23:47:29.126572269Z",
"provider": "osv",
"upstream": [
"CVE-2006-6501"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2006-6501"
]
},
"related_cves": [
{
"value": "CVE-2006-6501",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 410659,
"published_at": "2006-12-20T01:28:00+00:00"
}