The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade thunderbird | Jul 30, 2024 | Sep 15, 2006 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade linux-mozillaUpgrade seamonkeyUpgrade linux-mozilla-develUpgrade linux-seamonkey-develUpgrade linux-firefox-develUpgrade mozillaUpgrade linux-seamonkeyUpgrade mozilla-thunderbird | Dec 10, 2025 | Sep 15, 2006 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Sep 15, 2006 |
| Mfsa2006 60 | — | Upgrade to Mozilla Firefox version 1.5.0.7 | Jun 14, 2012 | Sep 15, 2006 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.5 | Feb 3, 2012 | Sep 15, 2006 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 1.5.0.7 | Feb 22, 2012 | Sep 15, 2006 |
| Suse | — | Upgrade openmotif-libs-32bitUpgrade openmotif-devel-32bitUpgrade xorg-x11-driver-video-nvidiaUpgrade mozilla-nssUpgrade openmotif-libs-x86Upgrade sax2-libsax-perlUpgrade yast2-control-centerUpgrade openmotif-develUpgrade mozilla-nss-64bitUpgrade yast2-x11Upgrade sax2-libsax-pythonUpgrade tightvncUpgrade sax2-guiUpgrade sax2-libsax-javaUpgrade xdg-menuUpgrade sax2-identUpgrade sax2-libsax-csharpUpgrade sax2-libsaxUpgrade mozilla-nss-32bitUpgrade openmotif-demoUpgrade openmotif-libsUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-translationsUpgrade openmotif-devel-64bitUpgrade desktop-data-NLDUpgrade yast2-qtUpgrade sax2Upgrade sax2-toolsUpgrade sax2-libsax-develUpgrade openmotif-libs-64bitUpgrade openmotifUpgrade MozillaFirefoxUpgrade mozilla-nss-develUpgrade dejavuUpgrade mozilla-nss-x86Upgrade xorg-x11-driver-video | Feb 17, 2015 | Sep 15, 2006 |
| Ubuntu | — | Upgrade mozilla-mailnewsUpgrade mozilla-thunderbirdUpgrade mozilla-thunderbird-locale-itUpgrade libnss3Upgrade mozilla-thunderbird-locale-nlUpgrade mozilla-thunderbird-inspectorUpgrade mozilla-thunderbird-typeaheadfindUpgrade mozilla-thunderbird-locale-deUpgrade mozilla-thunderbird-locale-caUpgrade mozilla-psmUpgrade firefoxUpgrade mozilla-browserUpgrade mozilla-thunderbird-locale-plUpgrade libnspr4Upgrade mozilla-thunderbird-enigmailUpgrade mozilla-thunderbird-locale-frUpgrade mozilla-thunderbird-locale-uk | Nov 8, 2024 | Sep 15, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub