CVE-2006-6504

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.

Published: 2006-12-20 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2006-6504 is rated High Risk (72.1/100): CVSS Critical severity, with high exploitation likelihood (EPSS 41.55%, 97th percentile). Core evidence: EPSS ranks this CVE among the most likely to be exploited in the near term. Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2006-6504

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-08-08 40.69% 41.55% +0.87%
2 2025-06-16 47.03% 40.69% -6.35%
3 2025-03-30 47.03%

Full EPSS history (15 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-6504

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
9.3 2.0 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
8.6 10.0 [email protected]

Weakness enumeration for CVE-2006-6504

OS Trackers for CVE-2006-6504

vendor priority summary link
alpine CVE-2006-6504: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0. https://security.alpinelinux.org/vuln/CVE-2006-6504
debian high CVE-2006-6504 high priority: Debian including 2 source packages (firefox, firefox-esr), 6 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 6. https://security-tracker.debian.org/tracker/CVE-2006-6504
gentoo high CVE-2006-6504: 2 GLSA(s) (200701-02, 200701-04), 3 atom(s) (www-client/mozilla-firefox, www-client/mozilla-firefox-bin, www-client/seamonkey); latest impact high. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2006-6504
redhat critical https://access.redhat.com/security/cve/CVE-2006-6504
ubuntu medium CVE-2006-6504 medium priority: Ubuntu including 6 source packages (firefox, firefox-3.0, iceape, lightning-sunbird, midbrowser, xulrunner), 30 status rows across 5 suites (dapper, edgy, feisty, gutsy, upstream): DNE 13, released 9, needs-triage 6, ignored 1, not-affected 1. https://ubuntu.com/security/CVE-2006-6504

Affected software / configurations for CVE-2006-6504

Vendor Product Version Raw CPE
mozilla firefox >= 1.5, < 1.5.0.9 cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozilla firefox >= 2.0, < 2.0.0.1 cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozilla seamonkey < 1.0.7 cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
canonical ubuntu_linux 5.10 cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*
canonical ubuntu_linux 6.06 cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
canonical ubuntu_linux 6.10 cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

References for CVE-2006-6504

URL Tags
ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc Broken Link
http://fedoranews.org/cms/node/2297 Broken Link
http://fedoranews.org/cms/node/2338 Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link
http://rhn.redhat.com/errata/RHSA-2006-0758.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0759.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0760.html Third Party Advisory
http://secunia.com/advisories/23282 Third Party Advisory
http://secunia.com/advisories/23422 Third Party Advisory
http://secunia.com/advisories/23433 Third Party Advisory
http://secunia.com/advisories/23439 Third Party Advisory
http://secunia.com/advisories/23440 Third Party Advisory
http://secunia.com/advisories/23468 Third Party Advisory
http://secunia.com/advisories/23514 Third Party Advisory
http://secunia.com/advisories/23545 Third Party Advisory
http://secunia.com/advisories/23589 Third Party Advisory
http://secunia.com/advisories/23601 Third Party Advisory
http://secunia.com/advisories/23614 Third Party Advisory
http://secunia.com/advisories/23618 Third Party Advisory
http://secunia.com/advisories/23672 Third Party Advisory
http://secunia.com/advisories/23692 Third Party Advisory
http://security.gentoo.org/glsa/glsa-200701-02.xml Third Party Advisory
http://securitytracker.com/id?1017417 Third Party Advisory VDB Entry
http://securitytracker.com/id?1017418 Third Party Advisory VDB Entry
http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml Third Party Advisory
http://www.kb.cert.org/vuls/id/928956 Third Party Advisory US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:010 Third Party Advisory
http://www.mozilla.org/security/announce/2006/mfsa2006-73.html Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_80_mozilla.html Broken Link
http://www.novell.com/linux/security/advisories/2007_06_mozilla.html Broken Link
http://www.securityfocus.com/archive/1/454939/100/0/threaded
http://www.securityfocus.com/archive/1/455145/100/0/threaded
http://www.securityfocus.com/archive/1/455728/100/200/threaded
http://www.securityfocus.com/bid/21668 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/usn-398-1 Third Party Advisory
http://www.ubuntu.com/usn/usn-398-2 Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA06-354A.html Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2006/5068 Third Party Advisory
http://www.vupen.com/english/advisories/2008/0083 Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-051.html Third Party Advisory VDB Entry
https://issues.rpath.com/browse/RPL-883 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11077 Third Party Advisory
cvelogic Threat Intelligence