MEDIUM
security flaw
Published Apr 14, 2006
4.3
MEDIUMCVSS 2.0
EPSS 1.82%
Description
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
Affected products
No data.
OR
- ≤ 1.0.7
- 1.0
- 1.0.1
- 1.0.2
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.6
- 1.5
- 1.5
- 1.5
- ≤ 1.7.12
- 1.7.6
- 1.7.7
- 1.7.8
- 1.7.10
- 1.7.11
- ≤ 1.0
- 1.0
- ≤ 1.0.7
- 1.0
- 1.0.1
- 1.0.2
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.5
- 1.0.6
- 1.5
- 1.5
No data.
Red Hat Enterprise Linux 4
devhelp-0:0.9.2-2.4.8
Fixed · RHSA-2006:0329
Red Hat Enterprise Linux 4
firefox-0:1.0.8-1.4.1
Fixed · RHSA-2006:0328
Red Hat Enterprise Linux 4
thunderbird-0:1.0.8-1.4.1
Fixed · RHSA-2006:0330
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | devhelp-0:0.9.2-2.4.8 | Fixed | RHSA-2006:0329 |
| Red Hat Enterprise Linux 4 | firefox-0:1.0.8-1.4.1 | Fixed | RHSA-2006:0328 |
| Red Hat Enterprise Linux 4 | thunderbird-0:1.0.8-1.4.1 | Fixed | RHSA-2006:0330 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (59)
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt vendor-advisoryx_refsource_SCO
- ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc vendor-advisoryx_refsource_SGI
- http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/19631 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19696 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19714 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19721 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19729 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19746 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19759 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19780 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19794 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19811 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19821 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19823 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19852 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19862 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19863 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19902 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19941 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19950 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/20051 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/21033 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/21622 third-party-advisoryx_refsource_SECUNIA
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 vendor-advisoryx_refsource_SUNALERT
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 vendor-advisoryx_refsource_SUNALERT
- http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm x_refsource_CONFIRM
- http://www.debian.org/security/2006/dsa-1044 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2006/dsa-1046 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2006/dsa-1051 vendor-advisoryx_refsource_DEBIAN
- http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml vendor-advisoryx_refsource_GENTOO
- http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml vendor-advisoryx_refsource_GENTOO
- http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml vendor-advisoryx_refsource_GENTOO
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 vendor-advisoryx_refsource_MANDRIVA
- http://www.mozilla.org/security/announce/2006/mfsa2006-19.html x_refsource_CONFIRM
- http://www.novell.com/linux/security/advisories/2006_04_25.html vendor-advisoryx_refsource_SUSE
- http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html vendor-advisoryx_refsource_FEDORA
- http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html vendor-advisoryx_refsource_FEDORA
- http://www.redhat.com/support/errata/RHSA-2006-0328.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2006-0329.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2006-0330.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/archive/1/436296/100/0/threaded vendor-advisoryx_refsource_FEDORA
- http://www.securityfocus.com/archive/1/436338/100/0/threaded vendor-advisoryx_refsource_FEDORA
- http://www.securityfocus.com/archive/1/438730/100/0/threaded vendor-advisoryx_refsource_HP
- http://www.securityfocus.com/bid/17516 vdb-entryx_refsource_BID
- http://www.vupen.com/english/advisories/2006/1356 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/3391 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2006-1731 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1618052 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25820 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2006-1731
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1955 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9604 vdb-entrysignaturex_refsource_OVAL
- https://usn.ubuntu.com/271-1/ vendor-advisoryx_refsource_UBUNTU
- https://usn.ubuntu.com/275-1/ vendor-advisoryx_refsource_UBUNTU
- https://usn.ubuntu.com/276-1/ vendor-advisoryx_refsource_UBUNTU
- https://www.cve.org/CVERecord?id=CVE-2006-1731
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Apr 14, 2006
Updated Aug 7, 2024
Reserved Apr 12, 2006
Link CVE-2006-1731
CISA Vulnrichment
Updated n/a