Lucene search
K

Firefox: overlong UTF-8 seqence detection problem

🗓️ 22 Jun 2010 21:57:00Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 7 Views

Firefox before 3.6 Beta 3 fails to detect overlong UTF-8 sequences, enabling XSS bypass; not CVE-2010-1210.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2009-5017
12 Nov 201022:00
attackerkb
Tenable Nessus
CentOS 4 : firefox (CESA-2010:0500)
9 Aug 201000:00
nessus
Tenable Nessus
CentOS 5 : firefox (CESA-2010:0501)
25 Jun 201000:00
nessus
Tenable Nessus
Oracle Linux 4 : firefox (ELSA-2010-0500)
12 Jul 201300:00
nessus
Tenable Nessus
Oracle Linux 5 : firefox (ELSA-2010-0501)
12 Jul 201300:00
nessus
Tenable Nessus
RHEL 4 : firefox (RHSA-2010:0500)
23 Jun 201000:00
nessus
Tenable Nessus
RHEL 5 : firefox (RHSA-2010:0501)
23 Jun 201000:00
nessus
Cent OS
firefox security update
6 Aug 201023:15
centos
Cent OS
devhelp, esc, firefox, gnome, totem, xulrunner, yelp security update
24 Jun 201016:14
centos
CVE
CVE-2009-5017
12 Nov 201021:00
cve
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux4i386firefox0:3.6.4-8.el4firefox-0:3.6.4-8.el4.i386.rpm
Red Hat Enterprise Linux4ia64firefox0:3.6.4-8.el4firefox-0:3.6.4-8.el4.ia64.rpm
Red Hat Enterprise Linux4ppcfirefox0:3.6.4-8.el4firefox-0:3.6.4-8.el4.ppc.rpm
Red Hat Enterprise Linux4s390firefox0:3.6.4-8.el4firefox-0:3.6.4-8.el4.s390.rpm
Red Hat Enterprise Linux4s390xfirefox0:3.6.4-8.el4firefox-0:3.6.4-8.el4.s390x.rpm
Red Hat Enterprise Linux4x86_64firefox0:3.6.4-8.el4firefox-0:3.6.4-8.el4.x86_64.rpm
Red Hat Enterprise Linux4i386firefox-debuginfo0:3.6.4-8.el4firefox-debuginfo-0:3.6.4-8.el4.i386.rpm
Red Hat Enterprise Linux4ia64firefox-debuginfo0:3.6.4-8.el4firefox-debuginfo-0:3.6.4-8.el4.ia64.rpm
Red Hat Enterprise Linux4ppcfirefox-debuginfo0:3.6.4-8.el4firefox-debuginfo-0:3.6.4-8.el4.ppc.rpm
Red Hat Enterprise Linux4s390firefox-debuginfo0:3.6.4-8.el4firefox-debuginfo-0:3.6.4-8.el4.s390.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Jun 2026 16:39Current
7.2High risk
Vulners AI Score7.2
CVSS 24.3
EPSS0.01867
7