Description
Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://rhn.redhat.com/errata/RHSA-2006-0733.htmlPatch, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2006-0734.htmlPatch, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2006-0735.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/22066
- http://secunia.com/advisories/22722Patch, Vendor Advisory
- http://secunia.com/advisories/22727Patch, Vendor Advisory
- http://secunia.com/advisories/22737Patch, Vendor Advisory
- http://secunia.com/advisories/22763Patch, Vendor Advisory
- http://secunia.com/advisories/22770Patch, Vendor Advisory
- http://secunia.com/advisories/22774Patch, Vendor Advisory
- http://secunia.com/advisories/22815
- http://secunia.com/advisories/22817Patch, Vendor Advisory
- http://secunia.com/advisories/22929Patch, Vendor Advisory
- http://secunia.com/advisories/22965Patch, Vendor Advisory
- http://secunia.com/advisories/22980Patch, Vendor Advisory
- http://secunia.com/advisories/23009Patch, Vendor Advisory
- http://secunia.com/advisories/23013Patch, Vendor Advisory
- http://secunia.com/advisories/23263Patch, Vendor Advisory
- http://secunia.com/advisories/23287Patch, Vendor Advisory
- http://secunia.com/advisories/23297Patch, Vendor Advisory
- http://secunia.com/advisories/24711
- http://security.gentoo.org/glsa/glsa-200612-06.xmlPatch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200612-07.xmlPatch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200612-08.xmlPatch, Vendor Advisory
- http://securitytracker.com/id?1017177Patch
- http://securitytracker.com/id?1017178Patch
- http://securitytracker.com/id?1017179Patch
- http://support.avaya.com/elmodocs2/security/ASA-2006-246.htmPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/815432Patch, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:205
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:206
- http://www.mozilla.org/security/announce/2006/mfsa2006-65.htmlVendor Advisory
- http://www.novell.com/linux/security/advisories/2006_68_mozilla.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/archive/1/451099/100/0/threaded
- http://www.securityfocus.com/bid/20957
- http://www.ubuntu.com/usn/usn-381-1Patch, Vendor Advisory
- http://www.ubuntu.com/usn/usn-382-1Patch, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA06-312A.htmlPatch, US Government Resource
- http://www.vupen.com/english/advisories/2006/3748
- http://www.vupen.com/english/advisories/2006/4387
- http://www.vupen.com/english/advisories/2007/1198
- http://www.vupen.com/english/advisories/2008/0083
- http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742
- https://bugzilla.mozilla.org/show_bug.cgi?id=355569
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30093
- https://issues.rpath.com/browse/RPL-765
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11496
- http://rhn.redhat.com/errata/RHSA-2006-0733.htmlPatch, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2006-0734.htmlPatch, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2006-0735.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/22066
- http://secunia.com/advisories/22722Patch, Vendor Advisory
- http://secunia.com/advisories/22727Patch, Vendor Advisory
- http://secunia.com/advisories/22737Patch, Vendor Advisory
- http://secunia.com/advisories/22763Patch, Vendor Advisory
- http://secunia.com/advisories/22770Patch, Vendor Advisory
- http://secunia.com/advisories/22774Patch, Vendor Advisory
- http://secunia.com/advisories/22815
- http://secunia.com/advisories/22817Patch, Vendor Advisory
- http://secunia.com/advisories/22929Patch, Vendor Advisory
Timeline
- Published
- Nov 8, 2006
- Last modified
- Jun 16, 2026
- NVD status
- Modified