3 matches found
CVE-2006-1733
CVE-2006-1733 affects Mozilla Firefox and Thunderbird 1.x before 1.5, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0. The flaw is in the compilation scope handling of privileged built‑in XBL bindings, enabling a remote attacker to run arbitrary code via (1) valueOf.call or (2) valueOf.appl...
CVE-2005-2706
The CVE-2005-2706 issue affects Firefox up to 1.0.6/1.0.x and Mozilla Suite up to 1.7.11, where an about: page (e.g., about:mozilla) could run JavaScript with chrome privileges due to a chrome privileges enforcement flaw. This could enable a remote attacker to inject or execute code with the brow...
CVE-2006-1734
CVE-2006-1734 affects Mozilla Firefox/Thunderbird 1.x prior to 1.5 and 1.0.x prior to 1.0.8, Mozilla Suite prior to 1.7.13, and SeaMonkey prior to 1.0. The vulnerability arises from the Object.watch method being able to access the internal cloneParent function, enabling remote attackers to execut...