CVE-2010-1210

Mozilla Characters mapped to U+FFFD in 8 bit encodings cause subsequent character to vanish

Published Jul 30, 2010 CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Description
intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-1240 intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text.
Ubuntu USN Ubuntu USN USN-930-4 Firefox and Xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-957-1 Firefox and Xulrunner vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 1:14 AM
Reserved
Mar 30, 2010, 12:00 AM
Status
Modified
Published
Jul 30, 2010, 8:30 PM
Modified
Jun 16, 2026, 11:17 PM
Severity
Moderate
Public date
Jul 20, 2010, 12:00 AM