CVE-2008-0416 PUBLISHED CVSS 4.300000190734863 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) "zero-length non-ASCII sequences" in certain Asian character sets.

EPSS 8.73% · 92.4th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
8.73%
92.4th percentile

Affected Products

VendorProductVersions
n/an/an/a
mozillafirefox0
mozillathunderbird0
mozillaseamonkey0

Timeline

References

…and 9 more

Open in Interactive Console →