CVEvulnerability

CVE-2006-2787

9.3 HIGH Published 2006-06-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-06-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.

Affected configurations

• mozilla firefox 1.0 • mozilla firefox 1.0.1 • mozilla firefox 1.0.2 • mozilla firefox 1.0.3 • mozilla firefox 1.0.4 • mozilla firefox 1.0.5 • mozilla firefox 1.0.6 • mozilla firefox 1.0.7 • mozilla firefox 1.5 • mozilla firefox 1.5.0.1 • mozilla firefox preview release • mozilla thunderbird 1.0 • mozilla thunderbird 1.0.1 • mozilla thunderbird 1.0.2 • mozilla thunderbird 1.0.3 • mozilla thunderbird 1.0.4 • mozilla thunderbird 1.0.5 • mozilla thunderbird 1.0.6 • mozilla thunderbird 1.0.7 • mozilla thunderbird 1.5

References