Beveiligingsadvies

CVE-2006-3807

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-07-27 19:00:00
Laatst bijgewerkt 2024-08-07 18:48:38
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling "named JavaScript functions" that use the constructor.