CVE-2007-0996

The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window…

published February 27, 2007

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02124 · 81.8th percentile
Published
2007-02-27T02:00Z
EPSS history
Timeline
  • 27 FEB 02:00Z
    The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window…
    cvelistv5