NVD

Id
62475  
Name
CVE-2006-3807  
Description
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling "named JavaScript functions" that use the constructor.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-27  
Modified Date
2011-03-07  
Seq
2006-3807  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324368 62475 CVE-2006-3807 20060703-01-P  View
324369 62475 CVE-2006-3807 oval:org.mitre.oval:def:10374  View
324370 62475 CVE-2006-3807 RHSA-2006:0609  View
324371 62475 CVE-2006-3807 GLSA-200608-02  View
324372 62475 CVE-2006-3807 GLSA-200608-04  View
324373 62475 CVE-2006-3807 1016586  View
324374 62475 CVE-2006-3807 1016587  View
324375 62475 CVE-2006-3807 1016588  View
324376 62475 CVE-2006-3807 102763  View
324377 62475 CVE-2006-3807 DSA-1159  View
324378 62475 CVE-2006-3807 DSA-1160  View
324379 62475 CVE-2006-3807 DSA-1161  View
324380 62475 CVE-2006-3807 GLSA-200608-03  View
324381 62475 CVE-2006-3807 VU#687396  View
324382 62475 CVE-2006-3807 MDKSA-2006:143  View
324383 62475 CVE-2006-3807 MDKSA-2006:145  View
324384 62475 CVE-2006-3807 MDKSA-2006:146  View
324385 62475 CVE-2006-3807 http://www.mozilla.org/security/announce/2006/mfsa2006-51.html  View
324386 62475 CVE-2006-3807 SUSE-SA:2006:048  View
324387 62475 CVE-2006-3807 RHSA-2006:0594  View
324388 62475 CVE-2006-3807 RHSA-2006:0608  View
324389 62475 CVE-2006-3807 RHSA-2006:0610  View
324390 62475 CVE-2006-3807 RHSA-2006:0611  View
324391 62475 CVE-2006-3807 20060727 rPSA-2006-0137-1 firefox  View
324392 62475 CVE-2006-3807 HPSBUX02156  View
324393 62475 CVE-2006-3807 SSRT061181  View
324394 62475 CVE-2006-3807 19181  View
324395 62475 CVE-2006-3807 USN-350-1  View
324396 62475 CVE-2006-3807 USN-354-1  View
324397 62475 CVE-2006-3807 USN-361-1  View
324398 62475 CVE-2006-3807 USN-327-1  View
324399 62475 CVE-2006-3807 USN-329-1  View
324400 62475 CVE-2006-3807 TA06-208A  View
324401 62475 CVE-2006-3807 ADV-2006-2998  View
324402 62475 CVE-2006-3807 ADV-2006-3748  View
324403 62475 CVE-2006-3807 ADV-2006-3749  View
324404 62475 CVE-2006-3807 ADV-2007-0058  View
324405 62475 CVE-2006-3807 ADV-2008-0083  View
324406 62475 CVE-2006-3807 mozilla-js-constructor-code-execution(27988)  View
324407 62475 CVE-2006-3807 https://issues.rpath.com/browse/RPL-536  View
324408 62475 CVE-2006-3807 https://issues.rpath.com/browse/RPL-537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58256 JVNDB-2006-000452 Mozilla 製品の Object() コンストラクタにおいて任意のコードを実行される脆弱性 Mozilla Firefox には JavaScript の名前付き関数が、標準的な Object() コンストラクタで生成された親オブジェクトを持ち、このコンストラクタがスクリプトによって再定義可能である脆弱性が存在します。 CVE-2006-3807 19909 CVE-2006-3807 62475 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000452.html 2006-07-25 2007-04-01 View