NetSight
IP …
critical9.3

CVE-2006-2787

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on obje…

Impact

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
MozillaThunderbird
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5

References