The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a ~ (tilde) character in proximity to a chunk delimiter, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.
Metrics
Affected Vendors & Products
References
History
Mon, 21 Oct 2024 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | ||
Vendors & Products |
Mozilla firefox Esr
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2012-11-21T11:00:00
Updated: 2024-08-06T20:28:07.618Z
Reserved: 2012-08-08T00:00:00
Link: CVE-2012-4207
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2012-11-21T12:55:02.023
Modified: 2024-10-21T13:55:03.510
Link: CVE-2012-4207
Redhat