CVE-2006-1731

CVE Information
CVE ID
CVE-2006-1731
Severity
MEDIUM CVSS 4.3
Publish Date
2006-04-14
Description

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

Collection Date
2026-01-13
Impact Summary
Affected Hosts 1
Related Incidents 0
Related Alerts 0
Affected Hosts (1)
Hostname OS Type Severity Total CVEs
inbridge-ubt-24 LINUX CRITICAL 2364