Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-5017

Опубликовано: 21 авг. 2009
Источник: redhat
CVSS2: 4.3

Описание

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.

Ссылки на источники

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=656287Firefox: overlong UTF-8 seqence detection problem

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu логотип

CVE-2009-5017

ubuntu
больше 14 лет назад

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.

nvd логотип

CVE-2009-5017

nvd
больше 14 лет назад

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.

debian логотип

CVE-2009-5017

debian
больше 14 лет назад

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UT ...

github логотип

GHSA-p83q-cg3p-77f9

github
около 3 лет назад

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.

oracle-oval логотип

ELSA-2010-0501

oracle-oval
почти 15 лет назад

ELSA-2010-0501: firefox security, bug fix, and enhancement update (CRITICAL)

4.3 Medium

CVSS2