CVE-2006-2787

Mozilla Firefox & Thunderbird <1.5.0.4 - Privilege Escalation

Title source: llm
STIX 2.1

Description

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.

References (51)

Core 51
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20382
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26842
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016214
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20376
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2006-0609.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016202
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20709
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21176
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:145
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3748
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/297-3/
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/296-1/
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/323-1/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20561
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21210
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0594.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21336
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/435795/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3749
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0610.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:146
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21178
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21607
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18228
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21532
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21270
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0083
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21188
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21134
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21631
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/446658/100/200/threaded
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/446657/100/200/threaded
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/296-2/
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1118
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1120
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0611.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1134
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21324
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21183
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9491
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22066
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21269
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_35_mozilla.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/297-1/
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0578.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2106
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22065

Scores

EPSS 0.0275
EPSS Percentile 84.6%

Details

Status published
Products (20)
mozilla/firefox 1.0
mozilla/firefox 1.0.1
mozilla/firefox 1.0.2
mozilla/firefox 1.0.3
mozilla/firefox 1.0.4
mozilla/firefox 1.0.5
mozilla/firefox 1.0.6
mozilla/firefox 1.0.7
mozilla/firefox 1.5 (3 CPE variants)
mozilla/firefox 1.5.0.1
... and 10 more
Published Jun 02, 2006
Tracked Since Feb 18, 2026