CVE-2006-1731

Name	CVE-2006-1731
Description	Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DSA-1044-1, DSA-1046-1, DSA-1051-1
NVD severity	medium (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
firefox (PTS)	sid	67.0.4-1	fixed
thunderbird (PTS)	jessie	1:52.8.0-1~deb8u1	fixed
	jessie (security)	1:60.7.2-1~deb8u1	fixed
	stretch	1:60.6.1-1~deb9u1	fixed
	stretch (security)	1:60.7.2-1~deb9u1	fixed
	buster	1:60.7.1-1	fixed
	sid	1:60.7.2-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
firefox	source	(unstable)	1.5.dfsg+1.5.0.2-2	medium
mozilla	source	(unstable)	2:1.7.13-0.1	medium
mozilla	source	sarge	2:1.7.8-1sarge5	medium	DSA-1046-1
mozilla-firefox	source	(unstable)	1.5.dfsg+1.5.0.2-2	medium
mozilla-firefox	source	sarge	1.0.4-2sarge6	medium	DSA-1044-1
mozilla-thunderbird	source	sarge	1.0.2-2.sarge1.0.8	low
thunderbird	source	(unstable)	1.5.0.2-1	low