Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-1726

Fixed in a distro release EPSS 7%

Unspecified vulnerability in Firefox and Thunderbird 1.5 before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to bypass the js_ValueToFunctionObject check and execute arbitrary code via unknown vectors involving setTimeout and Firefox' ForEach method.

Published 2006-04-14 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird

Distro releases

ReleasePackageFixed in
Debian 12thunderbird1.5.0.2-1
Debian 13thunderbird1.5.0.2-1
Debian 14thunderbird1.5.0.2-1