← Database

CVE-2006-1726

CRITICAL CVSS: 9.3 Published: 2006-04-14 Modified: 2026-06-16

Description

Unspecified vulnerability in Firefox and Thunderbird 1.5 before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to bypass the js_ValueToFunctionObject check and execute arbitrary code via unknown vectors involving setTimeout and Firefox' ForEach method.

Affected Platforms

Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird

Weakness Type

CWE-264

References