CVE-2006-1726
Fixed in a distro release EPSS 7%
Unspecified vulnerability in Firefox and Thunderbird 1.5 before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to bypass the js_ValueToFunctionObject check and execute arbitrary code via unknown vectors involving setTimeout and Firefox' ForEach method.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | thunderbird | 1.5.0.2-1 |
| Debian 13 | thunderbird | 1.5.0.2-1 |
| Debian 14 | thunderbird | 1.5.0.2-1 |