NVD

Id
61472  
Name
CVE-2006-2787  
Description
EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-06-02  
Modified Date
2011-03-07  
Seq
2006-2787  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317973 61472 CVE-2006-2787 oval:org.mitre.oval:def:9491  View
317974 61472 CVE-2006-2787 RHSA-2006:0609  View
317975 61472 CVE-2006-2787 1016202  View
317976 61472 CVE-2006-2787 1016214  View
317977 61472 CVE-2006-2787 DSA-1118  View
317978 61472 CVE-2006-2787 DSA-1120  View
317979 61472 CVE-2006-2787 DSA-1134  View
317980 61472 CVE-2006-2787 GLSA-200606-12  View
317981 61472 CVE-2006-2787 GLSA-200606-21  View
317982 61472 CVE-2006-2787 MDKSA-2006:143  View
317983 61472 CVE-2006-2787 MDKSA-2006:145  View
317984 61472 CVE-2006-2787 MDKSA-2006:146  View
317985 61472 CVE-2006-2787 http://www.mozilla.org/security/announce/2006/mfsa2006-31.html  View
317986 61472 CVE-2006-2787 SUSE-SA:2006:035  View
317987 61472 CVE-2006-2787 RHSA-2006:0578  View
317988 61472 CVE-2006-2787 RHSA-2006:0594  View
317989 61472 CVE-2006-2787 RHSA-2006:0610  View
317990 61472 CVE-2006-2787 RHSA-2006:0611  View
317991 61472 CVE-2006-2787 20060602 rPSA-2006-0091-1 firefox thunderbird  View
317992 61472 CVE-2006-2787 HPSBUX02156  View
317993 61472 CVE-2006-2787 HPSBUX02153  View
317994 61472 CVE-2006-2787 18228  View
317995 61472 CVE-2006-2787 USN-296-1  View
317996 61472 CVE-2006-2787 USN-296-2  View
317997 61472 CVE-2006-2787 USN-297-1  View
317998 61472 CVE-2006-2787 USN-297-3  View
317999 61472 CVE-2006-2787 USN-323-1  View
318000 61472 CVE-2006-2787 ADV-2006-2106  View
318001 61472 CVE-2006-2787 ADV-2006-3748  View
318002 61472 CVE-2006-2787 ADV-2006-3749  View
318003 61472 CVE-2006-2787 ADV-2008-0083  View
318004 61472 CVE-2006-2787 mozilla-valueof-sandbox-bypass(26842)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58131 JVNDB-2006-000327 Mozilla 製品の valueOf() 関数における権限昇格の脆弱性 Mozilla 製品には、EvalInSandbox() メソッドを通じて JavaScript を実行する際に、サンドボックスの外で作成したオブジェクトの valueOf() メソッドを呼び出すことで、サンドボックスの制限を回避して高度な特権を得ることが可能である問題が存在します。 CVE-2006-2787 18889 CVE-2006-2787 61472 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000327.html 2006-06-01 2007-04-01 View