Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnome-python2-extrasUpgrade totemUpgrade totem-mozpluginUpgrade devhelpUpgrade firefoxUpgrade devhelp-develUpgrade xulrunner-develUpgrade gnome-python2-gtkhtml2Upgrade gnome-python2-gtkspellUpgrade gnome-python2-libeggUpgrade totem-develUpgrade escUpgrade yelpUpgrade xulrunnerUpgrade gnome-python2-gtkmozembed | Dec 1, 2016 | Nov 12, 2010 |
| Oracle_linux | — | Upgrade gnome-python2-extrasUpgrade gnome-python2-libeggUpgrade totemUpgrade totem-develUpgrade gnome-python2-gtkspellUpgrade firefoxUpgrade totem-mozpluginUpgrade xulrunnerUpgrade gnome-python2-gtkhtml2Upgrade escUpgrade gnome-python2-gtkmozembedUpgrade devhelp-develUpgrade devhelpUpgrade xulrunner-develUpgrade yelp | Oct 16, 2024 | Nov 12, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub