Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade escUpgrade xulrunnerUpgrade gnome-python2-gtkmozembedUpgrade yelpUpgrade gnome-python2-gtkspellUpgrade devhelpUpgrade gnome-python2-gtkhtml2Upgrade totemUpgrade gnome-python2-extrasUpgrade firefoxUpgrade gnome-python2-libeggUpgrade xulrunner-develUpgrade totem-mozpluginUpgrade devhelp-develUpgrade totem-devel | Dec 1, 2016 | Nov 12, 2010 |
| Oracle_linux | — | Upgrade totem-mozpluginUpgrade firefoxUpgrade totem-develUpgrade gnome-python2-gtkspellUpgrade gnome-python2-libeggUpgrade totemUpgrade gnome-python2-gtkhtml2Upgrade xulrunnerUpgrade gnome-python2-extrasUpgrade xulrunner-develUpgrade devhelp-develUpgrade escUpgrade devhelpUpgrade gnome-python2-gtkmozembedUpgrade yelp | Oct 16, 2024 | Nov 12, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub