Mozilla Firefox 3.6.x < 3.6.9 Multiple Vulnerabilities

Binary data 5657.prm...

UTF-7 XSS by overriding document charset using &lt;object&gt; type attribute — Mozilla

Security researchers David Huang and Collin Jackson of Carnegie Mellon University CyLab Silicon Valley campus reported that the type attribute of an tag can override the charset of a framed HTML document, even when the document is included across origins. A page could be constructed containing su...