The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2008-12-17T23:00:00
Updated: 2024-08-07T10:56:47.095Z
Reserved: 2008-12-12T00:00:00
Link: CVE-2008-5510
Vulnrichment
No data.
NVD
Status : Modified
Published: 2008-12-17T23:30:00.627
Modified: 2024-11-21T00:54:13.330
Link: CVE-2008-5510
Redhat