--- title: "CVE-2006-3803\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2006-3803?format=md keywords: index, follow --- # CVE-2006-3803 Publication date 27 July 2006 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 7.04 feisty | Not affected | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Fixed 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1 | | firefox-granparadiso | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | lightning-sunbird | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | midbrowser | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | mozilla-thunderbird | 7.04 feisty | Fixed 1.5.0.13-0ubuntu0.7.04 | | 6.10 edgy | Fixed 1.5.0.13-0ubuntu0.6.10 | | 6.06 LTS dapper | Fixed 1.5.0.13-0ubuntu0.6.06 | | xulrunner | 7.04 feisty | Fixed 1.8.0.5-4.2 | | 6.10 edgy | Fixed 1.8.0.5-4.2 | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3803) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-3803) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-3803) * [Debian](https://security-tracker.debian.org/tracker/CVE-2006-3803) ### Related Ubuntu Security Notices (USN) + [USN-327-1](https://usn.ubuntu.com/USN-327-1) + firefox vulnerabilities + 28 July 2006 + [USN-350-1](https://usn.ubuntu.com/USN-350-1) + Thunderbird vulnerabilities + 22 September 2006 + [USN-329-1](https://usn.ubuntu.com/USN-329-1) + Thunderbird vulnerabilities + 29 July 2006 ### Other references *