CVE-2006-3802

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.

Date published : 2006-07-27

http://www.securityfocus.com/bid/19181

http://www.securityfocus.com/archive/1/441333/100/0/threaded