CVE ID:	CVE-2006-1733
Description:	Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) "by inserting an XBL method into the DOM's document.body prototype chain."
Test IDs:	1.3.6.1.4.1.25623.1.0.56664
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1733 102550 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 17516 http://www.securityfocus.com/bid/17516 19631 http://secunia.com/advisories/19631 19696 http://secunia.com/advisories/19696 19714 http://secunia.com/advisories/19714 19721 http://secunia.com/advisories/19721 19729 http://secunia.com/advisories/19729 19746 http://secunia.com/advisories/19746 19759 http://secunia.com/advisories/19759 19780 http://secunia.com/advisories/19780 19794 http://secunia.com/advisories/19794 19811 http://secunia.com/advisories/19811 19821 http://secunia.com/advisories/19821 19823 http://secunia.com/advisories/19823 19852 http://secunia.com/advisories/19852 19862 http://secunia.com/advisories/19862 19863 http://secunia.com/advisories/19863 19902 http://secunia.com/advisories/19902 19941 http://secunia.com/advisories/19941 19950 http://secunia.com/advisories/19950 20051 http://secunia.com/advisories/20051 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc 21033 http://secunia.com/advisories/21033 21622 http://secunia.com/advisories/21622 228526 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 ADV-2006-1356 http://www.vupen.com/english/advisories/2006/1356 DSA-1044 http://www.debian.org/security/2006/dsa-1044 DSA-1046 http://www.debian.org/security/2006/dsa-1046 DSA-1051 http://www.debian.org/security/2006/dsa-1051 FEDORA-2006-410 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html FEDORA-2006-411 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html FLSA:189137-1 http://www.securityfocus.com/archive/1/436296/100/0/threaded FLSA:189137-2 http://www.securityfocus.com/archive/1/436338/100/0/threaded GLSA-200604-12 http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml GLSA-200604-18 http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml GLSA-200605-09 http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml HPSBTU02118 http://www.securityfocus.com/archive/1/434524/100/0/threaded HPSBUX02122 http://www.securityfocus.com/archive/1/438730/100/0/threaded MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 MDKSA-2006:076 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 MDKSA-2006:078 http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 RHSA-2006:0328 http://www.redhat.com/support/errata/RHSA-2006-0328.html RHSA-2006:0329 http://www.redhat.com/support/errata/RHSA-2006-0329.html RHSA-2006:0330 http://www.redhat.com/support/errata/RHSA-2006-0330.html SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt SSRT061145 http://www.securityfocus.com/archive/1/434524/100/0/threaded SSRT061158 http://www.securityfocus.com/archive/1/438730/100/0/threaded SUSE-SA:2006:021 http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html SUSE-SA:2006:022 http://www.novell.com/linux/security/advisories/2006_04_25.html TA06-107A http://www.us-cert.gov/cas/techalerts/TA06-107A.html USN-271-1 https://usn.ubuntu.com/271-1/ USN-275-1 https://usn.ubuntu.com/275-1/ USN-276-1 https://usn.ubuntu.com/276-1/ VU#488774 http://www.kb.cert.org/vuls/id/488774 http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://www.mozilla.org/security/announce/2006/mfsa2006-16.html http://www.mozilla.org/security/announce/2006/mfsa2006-16.html mozilla-valueof-code-execution(25817) https://exchange.xforce.ibmcloud.com/vulnerabilities/25817 oval:org.mitre.oval:def:10815 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10815 oval:org.mitre.oval:def:2020 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2020