NetSight
IP …
medium4.3

CVE-2006-1731

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype…

Impact

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

Affected products

VendorProductAffected versions
MozillaFirefox
through 1.0.7
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaMozilla Suite
through 1.7.12
Versions 1.7.6, 1.7.7, 1.7.8, 1.7.10, 1.7.11
MozillaSeamonkey
through 1.0
Version 1.0
MozillaThunderbird
through 1.0.7
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-79

References