CVE-2006-3802

Source
https://cve.org/CVERecord?id=CVE-2006-3802
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2006-3802.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2006-3802
Downstream
Withdrawn
2026-01-27T04:06:43.560719Z
Published
2006-07-27T20:04:00Z
Modified
2026-01-27T04:06:43.560719Z
Summary
[none]
Details

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.

References

Affected packages