The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 5.0 | MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
| CWE ID | Type | Source |
|---|---|---|
| NVD-CWE-Other | Primary | nvd@nist.gov |
| Hyperlink | Source | Resource |
|---|---|---|
| http://secunia.com/advisories/33184 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33188 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33203 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33204 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33205 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33216 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33231 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33408 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33523 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/34501 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/35080 | secalert@redhat.com | Third Party Advisory |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 | secalert@redhat.com | Broken Link |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 | secalert@redhat.com | Broken Link |
| http://www.debian.org/security/2009/dsa-1707 | secalert@redhat.com | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 | secalert@redhat.com | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 | secalert@redhat.com | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 | secalert@redhat.com | Third Party Advisory |
| http://www.mozilla.org/security/announce/2008/mfsa2008-67.html | secalert@redhat.com | Vendor Advisory |
| http://www.redhat.com/support/errata/RHSA-2008-1036.html | secalert@redhat.com | Third Party Advisory |
| http://www.securityfocus.com/bid/32882 | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id?1021425 | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://www.ubuntu.com/usn/usn-690-2 | secalert@redhat.com | Third Party Advisory |
| http://www.ubuntu.com/usn/usn-701-1 | secalert@redhat.com | Third Party Advisory |
| http://www.vupen.com/english/advisories/2009/0977 | secalert@redhat.com | Third Party Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=228856 | secalert@redhat.com | Issue Tracking Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/47415 | secalert@redhat.com | Third Party Advisory VDB Entry |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9662 | secalert@redhat.com | Third Party Advisory |
| https://usn.ubuntu.com/690-1/ | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33184 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33188 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33203 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33204 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33205 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33216 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33231 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33408 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33523 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/34501 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/35080 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://www.debian.org/security/2009/dsa-1707 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mozilla.org/security/announce/2008/mfsa2008-67.html | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| http://www.redhat.com/support/errata/RHSA-2008-1036.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.securityfocus.com/bid/32882 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id?1021425 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.ubuntu.com/usn/usn-690-2 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.ubuntu.com/usn/usn-701-1 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.vupen.com/english/advisories/2009/0977 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=228856 | af854a3a-2127-422b-91ae-364da2661108 | Issue Tracking Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/47415 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9662 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| https://usn.ubuntu.com/690-1/ | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |