CVE-2006-1726

Published: Apr 14, 2006Modified: Apr 16, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in Firefox and Thunderbird 1.5 before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to bypass the js_ValueToFunctionObject check and execute arbitrary code via unknown vectors involving setTimeout and Firefox' ForEach method.

Affected (26)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version preview_release
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 beta
Mozilla Thunderbird	Version 1.0.1
Mozilla Thunderbird	Version 1.0.2
Mozilla Thunderbird	Version 1.0.3
Mozilla Thunderbird	Version 1.0.4
Mozilla Thunderbird	Version 1.0.5
Mozilla Thunderbird	Version 1.0.5 beta
Mozilla Thunderbird	Version 1.0.6
Mozilla Thunderbird	Version 1.0.7
Mozilla Thunderbird	Version 1.0
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 1.5 beta2

Related CWEs

References (40)

http://secunia.com/advisories/19631

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19649

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22065

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22066

Source: secalert@redhat.com

Vendor Advisory

http://securitytracker.com/id?1015931

Source: secalert@redhat.com

http://securitytracker.com/id?1015932

Source: secalert@redhat.com

http://securitytracker.com/id?1015933

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/968814

Source: secalert@redhat.com

US Government Resource

http://www.mozilla.org/security/announce/2006/mfsa2006-28.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.securityfocus.com/archive/1/434524/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/446658/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17516

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA06-107A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2006/1356

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3748

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3749

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/25825

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1968

Source: secalert@redhat.com

http://secunia.com/advisories/19631

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19649

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/22065

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/22066

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1015931

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015932

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015933

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/968814

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.mozilla.org/security/announce/2006/mfsa2006-28.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/archive/1/434524/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446657/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446658/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17516

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-107A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/1356

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3748

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3749

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0083

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25825

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1968

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.