CVE-2006-1733

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the…

published April 14, 2006

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) "by inserting an XBL method into the DOM's document.body prototype chain."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05196 · 92.4th percentile
Published
2006-04-14T10:00Z
EPSS history
Timeline
  • 14 APR 10:00Z
    Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the…
    cvelistv5