CVE-2008-4066

Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct…

published September 24, 2008

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "jav&#56325ascript" sequence, aka "HTML escaped low surrogates bug."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01761 · 77.8th percentile
Published
2008-09-24T18:00Z
EPSS history
Timeline
  • 24 SEP 18:00Z
    Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct…
    cvelistv5