VDB
CVE-2008-0416
CVE-2008-0416
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) "zero-length non-ASCII sequences" in certain Asian character sets.
EPSS 1.62% · 75.1th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
1.62%
75.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| mozilla | firefox | 0 |
| mozilla | thunderbird | 0 |
| mozilla | seamonkey | 0 |
Timeline
- Feb 12, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 29, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
- Sep 12, 2023 EPSS Score
- Dec 27, 2023 EPSS Score
References
- 29541 third-party-advisory
- firefox-character-encoding-xss(40488) vdb
- 238492 vendor-advisory
- DSA-1489 vendor-advisory
- 239546 vendor-advisory
- ADV-2008-1793 vdb
- ADV-2008-2091 vdb
- JVN#21563357 third-party-advisory
- TA08-087A third-party-advisory
- DSA-1484 vendor-advisory
- 29303 vdb
- GLSA-200805-18 vendor-advisory
- 28839 third-party-advisory
- TLSA-2008-9 vendor-advisory
- JVNDB-2008-000021 third-party-advisory
- 30620 third-party-advisory
- 28865 third-party-advisory
- 28879 third-party-advisory
- 30327 third-party-advisory
- USN-592-1 vendor-advisory
…and 9 more