| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.5= 1.5.0.1= preview_release | |
| thunderbird | = 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.5 |
EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free