CVE:CVE-2006-1726
CNNVD:CNNVD-200604-232
Mozilla Suite/Firefox/SeaMonkey/Thunderbird都是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。
未指定的漏洞在Firefox和Thunderbird 1.5.0.2之前1.5，之前1.0.1组件，攻击者可以利用setTimeout()和新的Firefox 1.5数组方式ForEach绕过js_ValueToFunctionObject()中的安全检查，获得权限提升。
solution:Upgrade mozilla firefox to a higher version than 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.5,1.5:beta1,1.5:beta2,1.5.0.1,preview_release,and avoid the version 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.5,1.5:beta1,1.5:beta2,1.5.0.1,preview_release; Upgrade mozilla seamonkey to a higher version than 1.0,1.0:beta,and avoid the version 1.0,1.0:beta; Upgrade mozilla thunderbird to a higher version than 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.5,1.5:beta2,and avoid the version 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.5,1.5:beta2