NVD

Id
52131  
Name
CVE-2009-5017  
Description
Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2010-11-12  
Modified Date
2010-12-01  
Seq
2009-5017  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263191 52131 CVE-2009-5017 http://hg.mozilla.org/releases/mozilla-1.9.2/rev/e42c563313a0  View
263192 52131 CVE-2009-5017 http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html  View
263193 52131 CVE-2009-5017 https://bugzilla.mozilla.org/show_bug.cgi?id=511859  View
263194 52131 CVE-2009-5017 https://bugzilla.mozilla.org/show_bug.cgi?id=522634  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37132 JVNDB-2010-002917 Mozilla Firefox におけるクロスサイトスクリプティングの保護機能を回避される脆弱性 Mozilla は、過度に長い UTF-8 エンコーディングを適切に処理しないため、クロスサイトスクリプティングの保護機能を回避される脆弱性が存在します。 CVE-2009-5017 42448 CVE-2009-5017 52131 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002917.html 2010-11-12 2012-03-27 View