PT-2010-1819 · Mozilla+1 · Firefox+1

Sirdarckcat · Publicado 2010-06-22 · Atualizado 2010-12-01 · CVE-2009-5017

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6 Beta 3

Description The issue arises from improper handling of overlong UTF-8 encoding, making it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string.

Recommendations For versions prior to 3.6 Beta 3, update to version 3.6 Beta 3 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-5017

RHSA-2010:0500

RHSA-2010:0501

RHSA-2010_0500

RHSA-2010_0501

Produtos afetados

Firefox

Red Hat

Referências · 19

• 🔥 http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html · Exploit
• https://access.redhat.com/security/cve/CVE-2008-5913 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1199 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=511859 · Correção
• https://access.redhat.com/security/cve/CVE-2009-5017 · Nota
• https://access.redhat.com/errata/RHSA-2010:0500 · Nota
• https://access.redhat.com/security/cve/CVE-2010-0182 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1203 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1202 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1198 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1125 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1121 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-5017 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2010:0501 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=522634 · Nota