CVE-2006-3807

Publication date 27 July 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling "named JavaScript functions" that use the constructor.

Status

Package Ubuntu Release Status
firefox 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Fixed 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1
firefox-granparadiso 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
lightning-sunbird 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
midbrowser 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
mozilla-thunderbird 7.04 feisty
Fixed 1.5.0.13-0ubuntu0.7.04
6.10 edgy
Fixed 1.5.0.13-0ubuntu0.6.10
6.06 LTS dapper
Fixed 1.5.0.13-0ubuntu0.6.06
xulrunner 7.04 feisty
Fixed 1.8.0.5-4.2
6.10 edgy
Fixed 1.8.0.5-4.2
6.06 LTS dapper Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-361-1
    • Mozilla vulnerabilities
    • 10 October 2006
    • USN-327-1
    • firefox vulnerabilities
    • 28 July 2006
    • USN-350-1
    • Thunderbird vulnerabilities
    • 22 September 2006
    • USN-329-1
    • Thunderbird vulnerabilities
    • 29 July 2006

Other references