CVE-2006-1726

no score yetEPSS 6.9%

Unspecified vulnerability in Firefox and Thunderbird 1.5 before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to bypass the js_ValueToFunctionObject check and execute arbitrary code via unknown vectors involving setTimeout and Firefox' ForEach method.

EPSS: 6.9% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2006-04-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox
mozilla:seamonkey
mozilla:thunderbird

References

http://secunia.com/advisories/19631
http://secunia.com/advisories/19649
http://secunia.com/advisories/22065
http://secunia.com/advisories/22066
http://securitytracker.com/id?1015931

Check your stack JSON