Description
Unspecified vulnerability in Firefox and Thunderbird 1.5 before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to bypass the js_ValueToFunctionObject check and execute arbitrary code via unknown vectors involving setTimeout and Firefox' ForEach method.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | thunderbird | 1.5.0.2-1 | — |
| Debian 13 | thunderbird | 1.5.0.2-1 | — |
| Debian 12 | thunderbird | 1.5.0.2-1 | — |
References
- ADV-2006-3748 vdb-entry
- mozilla-valuetofunctionobject-sec-bypass(25825) vdb-entry
- SSRT061145 vendor-advisory
- 1015933 vdb-entry
- 1015932 vdb-entry
- 1015931 vdb-entry
- ADV-2006-3749 vdb-entry
- oval:org.mitre.oval:def:1968 vdb-entry signature
- ADV-2008-0083 vdb-entry
- VU#968814 third-party-advisory
- SSRT061181 vendor-advisory
- ADV-2006-1356 vdb-entry
- SSRT061236 vendor-advisory
- 19649 third-party-advisory
- TA06-107A third-party-advisory
- 17516 vdb-entry
- 22066 third-party-advisory
- 22065 third-party-advisory
- 19631 third-party-advisory
- http://www.mozilla.org/security/announce/2006/mfsa2006-28.html