CVE ID:	CVE-2006-1735
Description:	Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1735 102550 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 17516 http://www.securityfocus.com/bid/17516 19631 http://secunia.com/advisories/19631 19696 http://secunia.com/advisories/19696 19714 http://secunia.com/advisories/19714 19721 http://secunia.com/advisories/19721 19729 http://secunia.com/advisories/19729 19746 http://secunia.com/advisories/19746 19759 http://secunia.com/advisories/19759 19780 http://secunia.com/advisories/19780 19794 http://secunia.com/advisories/19794 19811 http://secunia.com/advisories/19811 19821 http://secunia.com/advisories/19821 19823 http://secunia.com/advisories/19823 19852 http://secunia.com/advisories/19852 19862 http://secunia.com/advisories/19862 19863 http://secunia.com/advisories/19863 19902 http://secunia.com/advisories/19902 19941 http://secunia.com/advisories/19941 19950 http://secunia.com/advisories/19950 20051 http://secunia.com/advisories/20051 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc 21033 http://secunia.com/advisories/21033 21622 http://secunia.com/advisories/21622 228526 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 ADV-2006-1356 http://www.vupen.com/english/advisories/2006/1356 DSA-1044 http://www.debian.org/security/2006/dsa-1044 DSA-1046 http://www.debian.org/security/2006/dsa-1046 DSA-1051 http://www.debian.org/security/2006/dsa-1051 FEDORA-2006-410 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html FEDORA-2006-411 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html FLSA:189137-1 http://www.securityfocus.com/archive/1/436296/100/0/threaded FLSA:189137-2 http://www.securityfocus.com/archive/1/436338/100/0/threaded GLSA-200604-12 http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml GLSA-200604-18 http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml GLSA-200605-09 http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml HPSBTU02118 http://www.securityfocus.com/archive/1/434524/100/0/threaded HPSBUX02122 http://www.securityfocus.com/archive/1/438730/100/0/threaded MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 MDKSA-2006:076 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 MDKSA-2006:078 http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 RHSA-2006:0328 http://www.redhat.com/support/errata/RHSA-2006-0328.html RHSA-2006:0329 http://www.redhat.com/support/errata/RHSA-2006-0329.html RHSA-2006:0330 http://www.redhat.com/support/errata/RHSA-2006-0330.html SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt SSRT061145 http://www.securityfocus.com/archive/1/434524/100/0/threaded SSRT061158 http://www.securityfocus.com/archive/1/438730/100/0/threaded SUSE-SA:2006:021 http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html SUSE-SA:2006:022 http://www.novell.com/linux/security/advisories/2006_04_25.html TA06-107A http://www.us-cert.gov/cas/techalerts/TA06-107A.html USN-271-1 https://usn.ubuntu.com/271-1/ USN-275-1 https://usn.ubuntu.com/275-1/ USN-276-1 https://usn.ubuntu.com/276-1/ VU#813230 http://www.kb.cert.org/vuls/id/813230 http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://www.mozilla.org/security/announce/2006/mfsa2006-14.html http://www.mozilla.org/security/announce/2006/mfsa2006-14.html mozilla-xbl-code-execution(25815) https://exchange.xforce.ibmcloud.com/vulnerabilities/25815 oval:org.mitre.oval:def:1037 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1037 oval:org.mitre.oval:def:10930 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10930