9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.584 Medium
EPSS
Percentile
97.7%
EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 999 | all | firefox | < 1.5.dfsg+1.5.0.4-1 | firefox_1.5.dfsg+1.5.0.4-1_all.deb |
Debian | 12 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |
Debian | 11 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |
Debian | 10 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |
Debian | 999 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |
Debian | 13 | all | thunderbird | < 1.5.0.4-1 | thunderbird_1.5.0.4-1_all.deb |