Mozilla Thunderbird js_ValueToFunctionObject() Security Check Can Be Bypassed by Remote Users to Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1015932
|
|
SecurityTracker URL: http://securitytracker.com/id?1015932
|
|
CVE Reference: CVE-2006-1726
(Links to External Site)
|
Date: Apr 14 2006
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Mozilla Foundation Security Advisory
|
Version(s): 1.5 - 1.5.0.1
|
Description: A vulnerability was reported in Mozilla Thunderbird. A remote user can execute arbitrary code on the target system.
A remote user can create HTML that invokes the setTimeout() function and the ForEach array method to bypass the security check in
the js_ValueToFunctionObject() function. This can be exploited to install and execute arbitrary code.
If JavaScript is enabled,
the system may be vulnerable.
shutdown reported this vulnerability.
|
Impact: A remote user can execute arbitrary code on the target system.
|
Solution: The vendor has issued a fixed version (1.5.0.2), available at:
http://mozilla.com/
|
Vendor URL: www.mozilla.org/security/announce/2006/mfsa2006-28.html (Links to External Site)
|
Cause: Access control error, State error
|
Underlying OS: Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Fri, 14 Apr 2006 02:06:38 -0400
Subject: Mozilla Firefox vulnerability
|
http://www.mozilla.org/security/announce/2006/mfsa2006-28.html
Mozilla Foundation Security Advisory 2006-28
https://bugzilla.mozilla.org/show_bug.cgi?id=323501
CVE-2006-1726
|
|
