← Database

CVE-2006-3802

MEDIUM CVSS: 5.8 Published: 2006-07-27 Modified: 2026-06-16

Description

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.

Affected Platforms

Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird

Weakness Type

NVD-CWE-Other

References