← Database

CVE-2006-2787

CRITICAL CVSS: 9.3 Published: 2006-06-02 Modified: 2026-06-16

Description

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

NVD-CWE-Other

References