Oval Definition:oval:org.mitre.oval:def:1887
Revision Date:2007-05-09Version:3
Title:Mozilla Cross-site Scripting through window.controllers
Description:Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS) attacks via unspecified vectors involving the window.controllers array.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2006-1732
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):mozilla
Definition Synopsis
  • Mozilla Firefox version 1.0.7 or earlier is installed
  • Mozilla Firefox version 1.0.7 or earlier is installed
  • AND Firefox version 1.0.7 or earlier is installed
  • OR Mozilla Thunderbird version 1.0.7 or earlier is installed
  • Mozilla Thunderbird version 1.0.7 or earlier is installed
  • AND Mozilla Thunderbird version 1.0.7 or earlier is installed
  • OR Mozilla Suite version 1.7.12 or earlier is installed
  • Mozilla Suite version 1.7.12 or earlier is installed
  • AND Mozilla Suite version 1.7.12 or earlier is installed
  • OR A pre-release of SeaMonkey 1.0 is installed
  • A pre-release of SeaMonkey 1.0 is installed
  • AND A pre-release of SeaMonkey 1.0 is installed
    • BACK