CVE ID:	CVE-2006-1735
Description:	Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1735 BugTraq ID: 17516 http://www.securityfocus.com/bid/17516 Cert/CC Advisory: TA06-107A http://www.us-cert.gov/cas/techalerts/TA06-107A.html CERT/CC vulnerability note: VU#813230 http://www.kb.cert.org/vuls/id/813230 Debian Security Information: DSA-1044 (Google Search) http://www.debian.org/security/2006/dsa-1044 Debian Security Information: DSA-1046 (Google Search) http://www.debian.org/security/2006/dsa-1046 Debian Security Information: DSA-1051 (Google Search) http://www.debian.org/security/2006/dsa-1051 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html http://www.securityfocus.com/archive/1/436296/100/0/threaded http://www.securityfocus.com/archive/1/436338/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml HPdes Security Advisory: HPSBTU02118 http://www.securityfocus.com/archive/1/434524/100/0/threaded HPdes Security Advisory: HPSBUX02122 http://www.securityfocus.com/archive/1/438730/100/0/threaded HPdes Security Advisory: SSRT061145 http://www.securityfocus.com/archive/1/434524/100/0/threaded HPdes Security Advisory: SSRT061158 http://www.securityfocus.com/archive/1/438730/100/0/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1037 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10930 RedHat Security Advisories: RHSA-2006:0328 http://www.redhat.com/support/errata/RHSA-2006-0328.html RedHat Security Advisories: RHSA-2006:0329 http://www.redhat.com/support/errata/RHSA-2006-0329.html RedHat Security Advisories: RHSA-2006:0330 http://www.redhat.com/support/errata/RHSA-2006-0330.html SCO Security Bulletin: SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt http://secunia.com/advisories/19631 http://secunia.com/advisories/19696 http://secunia.com/advisories/19714 http://secunia.com/advisories/19721 http://secunia.com/advisories/19729 http://secunia.com/advisories/19746 http://secunia.com/advisories/19759 http://secunia.com/advisories/19780 http://secunia.com/advisories/19794 http://secunia.com/advisories/19811 http://secunia.com/advisories/19821 http://secunia.com/advisories/19823 http://secunia.com/advisories/19852 http://secunia.com/advisories/19862 http://secunia.com/advisories/19863 http://secunia.com/advisories/19902 http://secunia.com/advisories/19941 http://secunia.com/advisories/19950 http://secunia.com/advisories/20051 http://secunia.com/advisories/21033 http://secunia.com/advisories/21622 SGI Security Advisory: 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 SuSE Security Announcement: SUSE-SA:2006:021 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html https://usn.ubuntu.com/271-1/ https://usn.ubuntu.com/275-1/ https://usn.ubuntu.com/276-1/ http://www.vupen.com/english/advisories/2006/1356 XForce ISS Database: mozilla-xbl-code-execution(25815) https://exchange.xforce.ibmcloud.com/vulnerabilities/25815