CVE:CVE-2006-2787
CNNVD:CNNVD-200606-053
Mozilla Firefox/SeaMonkey/Thunderbird是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。
通过EvalInSandbox运行的JavaScript可以摆脱沙盒的限制，通过对在沙盒外创建并注入到沙盒中的对象调用valueOf()获得权限提升。恶意脚本可以使用这些权限入侵电脑或数据。
solution:Upgrade mozilla firefox to a higher version than 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.5,1.5:beta1,1.5:beta2,1.5.0.1,preview_release,and avoid the version 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.5,1.5:beta1,1.5:beta2,1.5.0.1,preview_release; Upgrade mozilla thunderbird to a higher version than 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.5,1.5:beta2,and avoid the version 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.5,1.5:beta2