{"api_version":"1","generated_at":"2026-07-23T09:47:23+00:00","cve":"CVE-2006-3807","urls":{"html":"https://cve.report/CVE-2006-3807","api":"https://cve.report/api/cve/CVE-2006-3807.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3807","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3807"},"summary":{"title":"CVE-2006-3807","description":"Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling \"named JavaScript functions\" that use the constructor.","state":"PUBLIC","assigner":"secalert@redhat.com","published_at":"2006-07-27 19:04:00","updated_at":"2018-10-17 21:30:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://secunia.com/advisories/21675","name":"21675","refsource":"SECUNIA","tags":[],"title":"Debian update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1","name":"102763","refsource":"SUNALERT","tags":[],"title":"#102763: Multiple Security Vulnerabilites in Mozilla 1.7 for Solaris 8, 9, and 10","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://issues.rpath.com/browse/RPL-537","name":"https://issues.rpath.com/browse/RPL-537","refsource":"CONFIRM","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"503"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","name":"RHSA-2006:0609","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-51.html","name":"http://www.mozilla.org/security/announce/2006/mfsa2006-51.html","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"MFSA 2006-51: Privilege escalation using named-functions and redefined \"new Object()\"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/19873","name":"19873","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla Firefox Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/329-1/","name":"USN-329-1","refsource":"UBUNTU","tags":[],"title":"USN-329-1: Thunderbird vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-350-1","name":"USN-350-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-350-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","name":"SSRT061181","refsource":"HP","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21228","name":"21228","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla Thunderbird Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.rpath.com/browse/RPL-536","name":"https://issues.rpath.com/browse/RPL-536","refsource":"CONFIRM","tags":[],"title":"[#RPL-536] update firefox to 1.5.0.5 for security issues - rPath JIRA","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/21654","name":"21654","refsource":"SECUNIA","tags":[],"title":"Debian update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22066","name":"22066","refsource":"SECUNIA","tags":[],"title":"HP-UX update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1159","name":"DSA-1159","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-1159-2 mozilla-thunderbird","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/687396","name":"VU#687396","refsource":"CERT-VN","tags":["Third Party Advisory","US Government Resource"],"title":"US-CERT Vulnerability Note VU#687396","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","name":"SSRT061236","refsource":"HP","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016587","name":"1016587","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Seamonkey Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21343","name":"21343","refsource":"SECUNIA","tags":[],"title":"Gentoo update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/2998","name":"ADV-2006-2998","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://secunia.com/advisories/21229","name":"21229","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Mozilla SeaMonkey Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1160","name":"DSA-1160","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-1160-2 mozilla","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19181","name":"19181","refsource":"BID","tags":["Patch"],"title":"Mozilla Multiple Products Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html","name":"TA06-208A","refsource":"CERT","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA06-208A -- Mozilla Products Contain Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","name":"RHSA-2006:0611","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22055","name":"22055","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","name":"MDKSA-2006:143","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21529","name":"21529","refsource":"SECUNIA","tags":[],"title":"SUSE update for MozillaFirefox, MozillaThunderbird, and Seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-354-1","name":"USN-354-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-354-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/21336","name":"21336","refsource":"SECUNIA","tags":[],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/0083","name":"ADV-2008-0083","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","name":"20060727 rPSA-2006-0137-1 firefox","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27988","name":"mozilla-js-constructor-code-execution(27988)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22210","name":"22210","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21243","name":"21243","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21216","name":"21216","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"rPath update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21532","name":"21532","refsource":"SECUNIA","tags":[],"title":"Mandriva update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3748","name":"ADV-2006-3748","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21361","name":"21361","refsource":"SECUNIA","tags":[],"title":"Gentoo update for mozilla-firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","name":"RHSA-2006:0610","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21246","name":"21246","refsource":"SECUNIA","tags":[],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","name":"RHSA-2006:0594","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21607","name":"21607","refsource":"SECUNIA","tags":[],"title":"Mandriva update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22065","name":"22065","refsource":"SECUNIA","tags":[],"title":"HP-UX update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21262","name":"21262","refsource":"SECUNIA","tags":[],"title":"SGI Advanced Linux Environment Multiple Updates - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","name":"GLSA-200608-02","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla SeaMonkey: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21250","name":"21250","refsource":"SECUNIA","tags":[],"title":"rPath update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc","name":"20060703-01-P","refsource":"SGI","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10374","name":"oval:org.mitre.oval:def:10374","refsource":"OVAL","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","name":"SUSE-SA:2006:048","refsource":"SUSE","tags":[],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","name":"MDKSA-2006:146","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22342","name":"22342","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for mozilla - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","name":"MDKSA-2006:145","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21634","name":"21634","refsource":"SECUNIA","tags":[],"title":"Debian update for mozilla - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","name":"GLSA-200608-04","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla Thunderbird: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21358","name":"21358","refsource":"SECUNIA","tags":[],"title":"Gentoo update for mozilla-thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016586","name":"1016586","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Firefox Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21631","name":"21631","refsource":"SECUNIA","tags":[],"title":"Red Hat update for seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/327-1/","name":"USN-327-1","refsource":"UBUNTU","tags":[],"title":"USN-327-1: firefox vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-361-1","name":"USN-361-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-361-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1161","name":"DSA-1161","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-1161-2 mozilla-firefox","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","name":"RHSA-2006:0608","refsource":"REDHAT","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","name":"GLSA-200608-03","refsource":"GENTOO","tags":[],"title":"Gentoo Linux Documentation\n--\n  Mozilla Firefox: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3749","name":"ADV-2006-3749","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://secunia.com/advisories/21269","name":"21269","refsource":"SECUNIA","tags":[],"title":"Red Hat update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0058","name":"ADV-2007-0058","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21270","name":"21270","refsource":"SECUNIA","tags":[],"title":"Red Hat update for firefox - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21275","name":"21275","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for thunderbird - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016588","name":"1016588","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Mozilla Thunderbird Multiple Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3807","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3807","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"dev","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"dev","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3807","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"1.5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2006-3807","ASSIGNER":"secalert@redhat.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling \"named JavaScript functions\" that use the constructor."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_affected":"=","version_value":"n/a"}]}}]}}]}},"references":{"reference_data":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc","refsource":"MISC","name":"ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","refsource":"MISC","name":"http://rhn.redhat.com/errata/RHSA-2006-0609.html"},{"url":"http://secunia.com/advisories/19873","refsource":"MISC","name":"http://secunia.com/advisories/19873"},{"url":"http://secunia.com/advisories/21216","refsource":"MISC","name":"http://secunia.com/advisories/21216"},{"url":"http://secunia.com/advisories/21228","refsource":"MISC","name":"http://secunia.com/advisories/21228"},{"url":"http://secunia.com/advisories/21229","refsource":"MISC","name":"http://secunia.com/advisories/21229"},{"url":"http://secunia.com/advisories/21243","refsource":"MISC","name":"http://secunia.com/advisories/21243"},{"url":"http://secunia.com/advisories/21246","refsource":"MISC","name":"http://secunia.com/advisories/21246"},{"url":"http://secunia.com/advisories/21250","refsource":"MISC","name":"http://secunia.com/advisories/21250"},{"url":"http://secunia.com/advisories/21262","refsource":"MISC","name":"http://secunia.com/advisories/21262"},{"url":"http://secunia.com/advisories/21269","refsource":"MISC","name":"http://secunia.com/advisories/21269"},{"url":"http://secunia.com/advisories/21270","refsource":"MISC","name":"http://secunia.com/advisories/21270"},{"url":"http://secunia.com/advisories/21275","refsource":"MISC","name":"http://secunia.com/advisories/21275"},{"url":"http://secunia.com/advisories/21336","refsource":"MISC","name":"http://secunia.com/advisories/21336"},{"url":"http://secunia.com/advisories/21343","refsource":"MISC","name":"http://secunia.com/advisories/21343"},{"url":"http://secunia.com/advisories/21358","refsource":"MISC","name":"http://secunia.com/advisories/21358"},{"url":"http://secunia.com/advisories/21361","refsource":"MISC","name":"http://secunia.com/advisories/21361"},{"url":"http://secunia.com/advisories/21529","refsource":"MISC","name":"http://secunia.com/advisories/21529"},{"url":"http://secunia.com/advisories/21532","refsource":"MISC","name":"http://secunia.com/advisories/21532"},{"url":"http://secunia.com/advisories/21607","refsource":"MISC","name":"http://secunia.com/advisories/21607"},{"url":"http://secunia.com/advisories/21631","refsource":"MISC","name":"http://secunia.com/advisories/21631"},{"url":"http://secunia.com/advisories/21634","refsource":"MISC","name":"http://secunia.com/advisories/21634"},{"url":"http://secunia.com/advisories/21654","refsource":"MISC","name":"http://secunia.com/advisories/21654"},{"url":"http://secunia.com/advisories/21675","refsource":"MISC","name":"http://secunia.com/advisories/21675"},{"url":"http://secunia.com/advisories/22055","refsource":"MISC","name":"http://secunia.com/advisories/22055"},{"url":"http://secunia.com/advisories/22065","refsource":"MISC","name":"http://secunia.com/advisories/22065"},{"url":"http://secunia.com/advisories/22066","refsource":"MISC","name":"http://secunia.com/advisories/22066"},{"url":"http://secunia.com/advisories/22210","refsource":"MISC","name":"http://secunia.com/advisories/22210"},{"url":"http://secunia.com/advisories/22342","refsource":"MISC","name":"http://secunia.com/advisories/22342"},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","refsource":"MISC","name":"http://security.gentoo.org/glsa/glsa-200608-02.xml"},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","refsource":"MISC","name":"http://security.gentoo.org/glsa/glsa-200608-04.xml"},{"url":"http://securitytracker.com/id?1016586","refsource":"MISC","name":"http://securitytracker.com/id?1016586"},{"url":"http://securitytracker.com/id?1016587","refsource":"MISC","name":"http://securitytracker.com/id?1016587"},{"url":"http://securitytracker.com/id?1016588","refsource":"MISC","name":"http://securitytracker.com/id?1016588"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1","refsource":"MISC","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1"},{"url":"http://www.debian.org/security/2006/dsa-1159","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1159"},{"url":"http://www.debian.org/security/2006/dsa-1160","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1160"},{"url":"http://www.debian.org/security/2006/dsa-1161","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1161"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","refsource":"MISC","name":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146"},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","refsource":"MISC","name":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0594.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0608.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0610.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0611.html"},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/441333/100/0/threaded"},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/446657/100/200/threaded"},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/446658/100/200/threaded"},{"url":"http://www.securityfocus.com/bid/19181","refsource":"MISC","name":"http://www.securityfocus.com/bid/19181"},{"url":"http://www.ubuntu.com/usn/usn-350-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-350-1"},{"url":"http://www.ubuntu.com/usn/usn-354-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-354-1"},{"url":"http://www.ubuntu.com/usn/usn-361-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-361-1"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html","refsource":"MISC","name":"http://www.us-cert.gov/cas/techalerts/TA06-208A.html"},{"url":"http://www.vupen.com/english/advisories/2006/2998","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/2998"},{"url":"http://www.vupen.com/english/advisories/2006/3748","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/3748"},{"url":"http://www.vupen.com/english/advisories/2006/3749","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/3749"},{"url":"http://www.vupen.com/english/advisories/2008/0083","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2008/0083"},{"url":"https://issues.rpath.com/browse/RPL-536","refsource":"MISC","name":"https://issues.rpath.com/browse/RPL-536"},{"url":"https://issues.rpath.com/browse/RPL-537","refsource":"MISC","name":"https://issues.rpath.com/browse/RPL-537"},{"url":"https://usn.ubuntu.com/327-1/","refsource":"MISC","name":"https://usn.ubuntu.com/327-1/"},{"url":"https://usn.ubuntu.com/329-1/","refsource":"MISC","name":"https://usn.ubuntu.com/329-1/"},{"url":"http://www.vupen.com/english/advisories/2007/0058","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2007/0058"},{"url":"http://www.kb.cert.org/vuls/id/687396","refsource":"MISC","name":"http://www.kb.cert.org/vuls/id/687396"},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-51.html","refsource":"MISC","name":"http://www.mozilla.org/security/announce/2006/mfsa2006-51.html"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27988","refsource":"MISC","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27988"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10374","refsource":"MISC","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10374"}]}},"nvd":{"publishedDate":"2006-07-27 19:04:00","lastModifiedDate":"2018-10-17 21:30:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3807","Ordinal":"19133","Title":"CVE-2006-3807","CVE":"CVE-2006-3807","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3807","Ordinal":"1","NoteData":"Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling \"named JavaScript functions\" that use the constructor.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3807","Ordinal":"2","NoteData":"2006-07-27","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3807","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}