Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2559?format=api",
    "vulnerability_id": "VCID-125v-281q-ufgj",
    "summary": "moz_bug_r_a4 discovered that the compilation scope of privileged\nbuilt-in XBL bindings was not fully protected from web content and\ncould be accessed by calling valueOf.call()\nand valueOf.apply() on a method of that binding. This could then\nbe used to compile and run attacker-supplied JavaScript, giving it\nthe privileges of the binding which would allow an attacker\nto install malware such as viruses and password sniffers.shutdown reported an alternate way to get to XBL compilation scope\nby inserting an XBL method into the DOM's document.body\nprototype chain.Thunderbird shares the JavaScript engine with Firefox\nand could be vulnerable if JavaScript were to be enabled in mail. This is not\nthe default setting and we strongly discourage users from running\nJavaScript in mail.",
    "aliases": [
        {
            "alias": "CVE-2006-1733"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1102?format=api",
            "purl": "pkg:mozilla/Firefox@1.0.8",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@1.0.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1101?format=api",
            "purl": "pkg:mozilla/Firefox@1.5.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@1.5.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1106?format=api",
            "purl": "pkg:mozilla/Mozilla%20Suite@1.7.13",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Mozilla%2520Suite@1.7.13"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1105?format=api",
            "purl": "pkg:mozilla/SeaMonkey@1.0.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@1.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1104?format=api",
            "purl": "pkg:mozilla/Thunderbird@1.0.8",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@1.0.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1103?format=api",
            "purl": "pkg:mozilla/Thunderbird@1.5.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@1.5.0"
        }
    ],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1733",
            "reference_id": "CVE-2006-1733",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1733"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2006-16",
            "reference_id": "mfsa2006-16",
            "reference_type": "",
            "scores": [
                {
                    "value": "critical",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2006-16"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-125v-281q-ufgj"
}