Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade gnome-python2-gtkmozembedUpgrade escUpgrade yelpUpgrade gnome-python2-gtkspellUpgrade gnome-python2-gtkhtml2Upgrade totemUpgrade firefoxUpgrade devhelp-develUpgrade gnome-python2-extrasUpgrade totem-mozpluginUpgrade devhelpUpgrade gnome-python2-libeggUpgrade totem-develUpgrade xulrunner-devel | Dec 1, 2016 | Nov 12, 2010 |
| Oracle_linux | — | Upgrade gnome-python2-extrasUpgrade gnome-python2-gtkspellUpgrade totem-develUpgrade totem-mozpluginUpgrade gnome-python2-gtkhtml2Upgrade firefoxUpgrade totemUpgrade gnome-python2-libeggUpgrade xulrunnerUpgrade escUpgrade devhelp-develUpgrade yelpUpgrade devhelpUpgrade xulrunner-develUpgrade gnome-python2-gtkmozembed | Oct 16, 2024 | Nov 12, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub