intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2010-07-30T20:00:00

Updated: 2017-09-18T12:57:01

Reserved: 2010-03-30T00:00:00


Link: CVE-2010-1210

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2010-07-30T20:30:01.473

Modified: 2017-09-19T01:30:37.003


Link: CVE-2010-1210

JSON object: View

cve-icon Redhat Information

No data.

CWE