CVE-2006-1726
CVE-2006-1726
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Unspecified vulnerability in Firefox and Thunderbird 1.5 before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to bypass the js_ValueToFunctionObject check and execute arbitrary code via unknown vectors involving setTimeout and Firefox' ForEach method.
EPSS 6.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
thunderbird Debian:12
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
thunderbird Debian:13
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
thunderbird Debian:14
- Affected ranges
- ECOSYSTEM: < 1.5.0.2-1
Update to 1.5.0.2-1
Original sources
- http://www.vupen.com/english/advisories/2006/3748
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25825
- http://www.securityfocus.com/archive/1/434524/100/0/threaded
- http://securitytracker.com/id?1015933
- http://securitytracker.com/id?1015932
- http://securitytracker.com/id?1015931
- http://www.vupen.com/english/advisories/2006/3749
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1968
- http://www.vupen.com/english/advisories/2008/0083
- http://www.kb.cert.org/vuls/id/968814
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
- http://www.vupen.com/english/advisories/2006/1356
- http://www.securityfocus.com/archive/1/446657/100/200/threaded
- http://secunia.com/advisories/19649
- http://www.us-cert.gov/cas/techalerts/TA06-107A.html
- http://www.securityfocus.com/bid/17516
- http://secunia.com/advisories/22066
- http://secunia.com/advisories/22065
- http://secunia.com/advisories/19631
- http://www.mozilla.org/security/announce/2006/mfsa2006-28.html
- https://nvd.nist.gov/vuln/detail/CVE-2006-1726