cve/2006/CVE-2006-2787.md

CVE-2006-2787

Description

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.

POC

Reference

• http://www.securityfocus.com/archive/1/446658/100/200/threaded
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9491

Github

No PoCs found on GitHub currently.