vulnwire
9.3crit

CVE-2006-1735

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.2%
percentile 95%
Public exploits
0
none known

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.

Exploit prediction (EPSS)

9.19% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

  • usn.ubuntu.com /275-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • redhat.com /support/errata/RHSA-2006-0330.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /archive/1/434524/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
  • secunia.com /advisories/19902 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • usn.ubuntu.com /276-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • securityfocus.com /archive/1/438730/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
  • secunia.com /advisories/19941 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19780 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2006-0328.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/19821 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • kb.cert.org /vuls/id/813230 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • gentoo.org /security/en/glsa/glsa-200604-12.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/21622 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19862 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2006:075 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1037 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2006-205.htm · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/19823 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mozilla.org /security/announce/2006/mfsa2006-14.html · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2006/dsa-1051 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • redhat.com /archives/fedora-announce-list/2006-April/msg00153.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • usn.ubuntu.com /271-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • secunia.com /advisories/19714 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2006-0329.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • gentoo.org /security/en/glsa/glsa-200604-18.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/19811 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19794 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19746 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/21033 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/25815 · vdb-entry, x_refsource_XF, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-102550-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/19696 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19759 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.suse.com /archive/suse-security-announce/2006-Apr/0003.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • securityfocus.com /archive/1/436338/100/0/threaded · vendor-advisory, x_refsource_FEDORA, x_transferred
  • vupen.com /english/advisories/2006/1356 · vdb-entry, x_refsource_VUPEN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10930 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2006:078 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/19729 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/20051 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19631
  • secunia.com /advisories/19721 · Vendor Advisory
  • secunia.com /advisories/19852 · Vendor Advisory
  • secunia.com /advisories/19863 · Vendor Advisory
  • secunia.com /advisories/19950 · Vendor Advisory
  • sunsolve.sun.com /search/document.do?assetkey=1-26-228526-1
  • debian.org /security/2006/dsa-1044
  • debian.org /security/2006/dsa-1046
  • gentoo.org /security/en/glsa/glsa-200605-09.xml
  • mandriva.com /security/advisories?name=MDKSA-2006:076
  • novell.com /linux/security/advisories/2006_04_25.html
  • redhat.com /archives/fedora-announce-list/2006-April/msg00154.html

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.