Description
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.
References (50)
Core 50
Core References
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0078.html
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461336/100/0/threaded
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0108.html
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml
Vendor Advisory vendor-advisory
x_refsource_slackware
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
Patch, Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2007/mfsa2007-02.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/32111
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-428-1
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10164
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461809/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/22694
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24395
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24328
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200703-04.xml
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24384
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24457
Various Sources x_refsource_misc
http://ha.ckers.org/xss.html#XSS_Non_alpha_non_digit2
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24343
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2007/dsa-1336
Vendor Advisory vendor-advisory
x_refsource_hp
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0718
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24650
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24320
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/25588
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1103
Various Sources vendor-advisory
x_refsource_suse
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0083
Vendor Advisory vendor-advisory
x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24293
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24238
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24393
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24342
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24287
Mailing List vendor-advisory
x_refsource_fedora
http://fedoranews.org/cms/node/2713
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0097.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1017702
Mailing List vendor-advisory
x_refsource_fedora
http://fedoranews.org/cms/node/2728
Vendor Advisory vendor-advisory
x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24205
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1081
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24333
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:050
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24290
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24455
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2007-0077.html
Vendor Advisory vendor-advisory
x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/32112
Vendor Advisory vendor-advisory
x_refsource_slackware
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0079.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24437
Scores
EPSS
0.0213
EPSS Percentile
79.9%
Details
CWE
CWE-79
Status
published
Products (4)
mozilla/firefox
1.5.0.10
mozilla/firefox
2.0
mozilla/firefox
2.0.0.1
mozilla/seamonkey
< 1.0.7
Published
Feb 26, 2007
Tracked Since
Feb 18, 2026