NVD

Id
60438  
Name
CVE-2006-1733  
Description
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) "by inserting an XBL method into the DOM"s document.body prototype chain."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-14  
Modified Date
2011-03-07  
Seq
2006-1733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
311511 60438 CVE-2006-1733 SCOSA-2006.26  View
311512 60438 CVE-2006-1733 20060404-01-U  View
311513 60438 CVE-2006-1733 SUSE-SA:2006:021  View
311514 60438 CVE-2006-1733 oval:org.mitre.oval:def:10815  View
311515 60438 CVE-2006-1733 oval:org.mitre.oval:def:2020  View
311516 60438 CVE-2006-1733 102550  View
311517 60438 CVE-2006-1733 228526  View
311518 60438 CVE-2006-1733 http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm  View
311519 60438 CVE-2006-1733 DSA-1044  View
311520 60438 CVE-2006-1733 DSA-1046  View
311521 60438 CVE-2006-1733 DSA-1051  View
311522 60438 CVE-2006-1733 GLSA-200604-12  View
311523 60438 CVE-2006-1733 GLSA-200604-18  View
311524 60438 CVE-2006-1733 GLSA-200605-09  View
311525 60438 CVE-2006-1733 VU#488774  View
311526 60438 CVE-2006-1733 MDKSA-2006:075  View
311527 60438 CVE-2006-1733 MDKSA-2006:076  View
311528 60438 CVE-2006-1733 MDKSA-2006:078  View
311529 60438 CVE-2006-1733 http://www.mozilla.org/security/announce/2006/mfsa2006-16.html  View
311530 60438 CVE-2006-1733 SUSE-SA:2006:022  View
311531 60438 CVE-2006-1733 FEDORA-2006-410  View
311532 60438 CVE-2006-1733 FEDORA-2006-411  View
311533 60438 CVE-2006-1733 RHSA-2006:0328  View
311534 60438 CVE-2006-1733 RHSA-2006:0329  View
311535 60438 CVE-2006-1733 RHSA-2006:0330  View
311536 60438 CVE-2006-1733 SSRT061145  View
311537 60438 CVE-2006-1733 FLSA:189137-1  View
311538 60438 CVE-2006-1733 FLSA:189137-2  View
311539 60438 CVE-2006-1733 SSRT061158  View
311540 60438 CVE-2006-1733 17516  View
311541 60438 CVE-2006-1733 USN-271-1  View
311542 60438 CVE-2006-1733 USN-275-1  View
311543 60438 CVE-2006-1733 USN-276-1  View
311544 60438 CVE-2006-1733 TA06-107A  View
311545 60438 CVE-2006-1733 ADV-2006-1356  View
311546 60438 CVE-2006-1733 mozilla-valueof-code-execution(25817)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57998 JVNDB-2006-000194 Mozilla 製品の XBL バインディング編集スコープにおける任意のコードを実行される脆弱性 ------------ CVE-2006-1733 17835 CVE-2006-1733 60438 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000194.html 2006-04-11 2007-04-01 View