NVD

Id
60440  
Name
CVE-2006-1735  
Description
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-04-14  
Modified Date
2011-03-07  
Seq
2006-1735  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
311583 60440 CVE-2006-1735 SCOSA-2006.26  View
311584 60440 CVE-2006-1735 20060404-01-U  View
311585 60440 CVE-2006-1735 SUSE-SA:2006:021  View
311586 60440 CVE-2006-1735 oval:org.mitre.oval:def:1037  View
311587 60440 CVE-2006-1735 oval:org.mitre.oval:def:10930  View
311588 60440 CVE-2006-1735 102550  View
311589 60440 CVE-2006-1735 228526  View
311590 60440 CVE-2006-1735 http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm  View
311591 60440 CVE-2006-1735 DSA-1044  View
311592 60440 CVE-2006-1735 DSA-1046  View
311593 60440 CVE-2006-1735 DSA-1051  View
311594 60440 CVE-2006-1735 GLSA-200604-12  View
311595 60440 CVE-2006-1735 GLSA-200604-18  View
311596 60440 CVE-2006-1735 GLSA-200605-09  View
311597 60440 CVE-2006-1735 VU#813230  View
311598 60440 CVE-2006-1735 MDKSA-2006:075  View
311599 60440 CVE-2006-1735 MDKSA-2006:076  View
311600 60440 CVE-2006-1735 MDKSA-2006:078  View
311601 60440 CVE-2006-1735 http://www.mozilla.org/security/announce/2006/mfsa2006-14.html  View
311602 60440 CVE-2006-1735 SUSE-SA:2006:004  View
311603 60440 CVE-2006-1735 FEDORA-2006-410  View
311604 60440 CVE-2006-1735 FEDORA-2006-411  View
311605 60440 CVE-2006-1735 RHSA-2006:0328  View
311606 60440 CVE-2006-1735 RHSA-2006:0329  View
311607 60440 CVE-2006-1735 RHSA-2006:0330  View
311608 60440 CVE-2006-1735 HPSBTU02118  View
311609 60440 CVE-2006-1735 FLSA:189137-1  View
311610 60440 CVE-2006-1735 FLSA:189137-2  View
311611 60440 CVE-2006-1735 SSRT061158  View
311612 60440 CVE-2006-1735 17516  View
311613 60440 CVE-2006-1735 USN-271-1  View
311614 60440 CVE-2006-1735 USN-275-1  View
311615 60440 CVE-2006-1735 USN-276-1  View
311616 60440 CVE-2006-1735 TA06-107A  View
311617 60440 CVE-2006-1735 ADV-2006-1356  View
311618 60440 CVE-2006-1735 mozilla-xbl-code-execution(25815)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58000 JVNDB-2006-000196 Mozilla 製品の XBL.method.eval() 関数における任意のコードを実行される脆弱性 ------------ CVE-2006-1735 17837 CVE-2006-1735 60440 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000196.html 2006-04-11 2007-04-01 View