NVD

Id
3924  
Name
CVE-2008-4066  
Description
Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "jav&#56325ascript" sequence, aka "HTML escaped low surrogates bug."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-09-24  
Modified Date
2012-10-29  
Seq
2008-4066  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24889 3924 CVE-2008-4066 http://blogs.technet.com/bluehat/archive/2008/08/14/targeted-fuzzing.aspx  View
24890 3924 CVE-2008-4066 http://download.novell.com/Download?buildid=WZXONb-tqBw~  View
24891 3924 CVE-2008-4066 JVN#96950482  View
24892 3924 CVE-2008-4066 JVNDB-2011-000058  View
24893 3924 CVE-2008-4066 SUSE-SA:2008:050  View
24894 3924 CVE-2008-4066 oval:org.mitre.oval:def:8880  View
24895 3924 CVE-2008-4066 SSA:2008-269-02  View
24896 3924 CVE-2008-4066 SSA:2008-269-01  View
24897 3924 CVE-2008-4066 SSA:2008-270-01  View
24898 3924 CVE-2008-4066 256408  View
24899 3924 CVE-2008-4066 DSA-1649  View
24900 3924 CVE-2008-4066 DSA-1669  View
24901 3924 CVE-2008-4066 MDVSA-2008:205  View
24902 3924 CVE-2008-4066 MDVSA-2008:206  View
24903 3924 CVE-2008-4066 http://www.mozilla.org/security/announce/2008/mfsa2008-43.html  View
24904 3924 CVE-2008-4066 RHSA-2008:0882  View
24905 3924 CVE-2008-4066 RHSA-2008:0908  View
24906 3924 CVE-2008-4066 31346  View
24907 3924 CVE-2008-4066 1020920  View
24908 3924 CVE-2008-4066 http://www.thespanner.co.uk/2008/06/30/javascript-protocol-fuzz-results/  View
24909 3924 CVE-2008-4066 USN-645-1  View
24910 3924 CVE-2008-4066 USN-645-2  View
24911 3924 CVE-2008-4066 USN-647-1  View
24912 3924 CVE-2008-4066 ADV-2008-2661  View
24913 3924 CVE-2008-4066 ADV-2009-0977  View
24914 3924 CVE-2008-4066 firefox-htmlparser-security-bypass(45358)  View
24915 3924 CVE-2008-4066 https://bugzilla.mozilla.org/show_bug.cgi?id=448166  View
24916 3924 CVE-2008-4066 FEDORA-2008-8401  View
24917 3924 CVE-2008-4066 FEDORA-2008-8429  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46446 JVNDB-2008-001756 Mozilla Firefox における下位サロゲート文字の処理に関するクロスサイトスクリプティング防止機構を回避される脆弱性 Mozilla Firefox には、HTML エスケープされた下位サロゲート文字の処理に不備があるため、クロスサイトスクリプティング防止機構を回避される脆弱性が存在します。 CVE-2008-4066 34179 CVE-2008-4066 3924 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001756.html 2008-09-23 2009-04-30 View