CVE-2010-2768

Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use…

published September 9, 2010

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms via UTF-7 encoding.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02107 · 81.6th percentile
Published
2010-09-09T18:00Z
EPSS history
Timeline
  • 09 SEP 18:00Z
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use…
    cvelistv5