VULNERABILITY INTELLIGENCE
CVE-2006-2787
CVSS score9.3 NONE
EPSS probability2.75%
CISA KEVNot currently listed
Published2006-06-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other