Lucene search
Mozilla FoundationMFSA2006-31HistoryJun 01, 2006 - 12:00 a.m.
EvalInSandbox escape (Proxy Autoconfig, Greasemonkey) — Mozilla
2006-06-0100:00:00
Mozilla Foundation
www.mozilla.org
20
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.584
Percentile
97.7%
Mozilla researcher moz_bug_r_a4 demonstrated that javascript run via EvalInSandbox can escape the sandbox and gain elevated privilege by calling valueOf() on objects created outside the sandbox and inserted into it. Malicious scripts could use these privileges to compromise your computer or data.
Affected configurations
Node
mozillafirefoxRange<1.5.0.4
ORmozillaseamonkeyRange<1.0.2
ORmozillathunderbirdRange<1.5.0.4
Related
nvd
nvd
CVE-2006-2787
2006-06-02 20:02:00
prion
prion
Design/Logic Flaw
2006-06-02 20:02:00
ubuntucve
ubuntucve
CVE-2006-2787
2006-06-02 00:00:00
debiancve
debiancve
CVE-2006-2787
2006-06-02 20:02:00
cve
cve
CVE-2006-2787
2006-06-02 20:02:00
cvelist
cvelist
CVE-2006-2787
2006-06-02 20:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)
2008-09-24 00:00:00
Ubuntu: Security Advisory (USN-297-1)
2022-08-26 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2006-06-14 00:00:00
Thunderbird vulnerabilities
2006-07-26 00:00:00
firefox vulnerabilities
2006-06-09 00:00:00
nessus
nessus
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-1672)
2007-10-17 00:00:00
GLSA-200606-21 : Mozilla Thunderbird: Multiple vulnerabilities
2006-06-20 00:00:00
Ubuntu 6.06 LTS : mozilla-thunderbird vulnerabilities (USN-297-1)
2007-11-10 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2006-06-19 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2006-06-11 00:00:00
securityvulns
securityvulns
[USN-297-3] Thunderbird vulnerabilities
2006-07-27 00:00:00
[USN-323-1] mozilla vulnerabilities
2006-07-27 00:00:00
redhat
redhat
(RHSA-2006:0578) seamonkey security update (was mozilla)
2006-07-20 00:00:00
(RHSA-2006:0610) firefox security update
2006-07-28 00:00:00
(RHSA-2006:0611) thunderbird security update
2006-07-28 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2006-06-23 08:11:46
osv
osv
mozilla-firefox - several vulnerabilities
2006-07-23 00:00:00
mozilla - several
2006-07-22 00:00:00
mozilla-thunderbird - several vulnerabilities
2006-08-02 00:00:00
debian
debian
oraclelinux
oraclelinux
Critical thunderbird security update
2006-12-07 00:00:00
Critical firefox security update
2006-12-07 00:00:00
centos
centos
thunderbird security update
2006-07-29 11:51:27
firefox security update
2006-07-29 11:51:13
devhelp, seamonkey security update
2006-08-05 15:16:05
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.584
Percentile
97.7%
Related for MFSA2006-31