Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "jav�ascript" sequence, aka "HTML escaped low surrogates bug."
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade seamonkeyUpgrade thunderbirdUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chat | Dec 1, 2016 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 43 | — | Upgrade to Mozilla Firefox version 2.0.0.17Upgrade to Mozilla Firefox version 3.0.2 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-mailUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner181-64bitUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-translationsUpgrade seamonkeyUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181Upgrade mozillaUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-mailUpgrade mozilla-xulrunner190-develUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-64bitUpgrade seamonkey-ircUpgrade mozilla-csUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-huUpgrade mozilla-venkmanUpgrade gecko-sdkUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-develUpgrade MozillaFirefox-translationsUpgrade mozilla-calendarUpgrade mozilla-deatUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-xulrunner181-32bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner181-l10nUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner181-develUpgrade MozillaFirefoxUpgrade suse-releaseUpgrade mozilla-irc | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade mozilla-thunderbirdUpgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub