CVE-2009-5017 PUBLISHED CVSS 4.300000190734863 MEDIUM

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.

EPSS 0.17% · 37.5th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.17%
37.5th percentile

Affected Products

VendorProductVersions
n/an/an/a
mozillafirefox0, 3.6

Timeline

References

Open in Interactive Console →