Oval Definition:	oval:org.mitre.oval:def:10086
Revision Date: 2013-04-29 Version: 12 Title: The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set. Description: The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-0996 Platform(s): CentOS Linux 3 CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.8-0.2.el3 OR seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3 OR seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3 OR seamonkey is earlier than 0:1.0.8-0.2.el3 OR seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3 OR seamonkey-mail is earlier than 0:1.0.8-0.2.el3 OR seamonkey-chat is earlier than 0:1.0.8-0.2.el3 OR seamonkey-devel is earlier than 0:1.0.8-0.2.el3 OR seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3 OR seamonkey-nss is earlier than 0:1.0.8-0.2.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section devhelp-devel is earlier than 0:0.10-0.7.el4 OR seamonkey-nspr is earlier than 0:1.0.8-0.2.el4 OR seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4 OR thunderbird is earlier than 0:1.5.0.10-0.1.el4 OR seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4 OR seamonkey is earlier than 0:1.0.8-0.2.el4 OR seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4 OR devhelp is earlier than 0:0.10-0.7.el4 OR firefox is earlier than 0:1.5.0.10-0.1.el4 OR seamonkey-mail is earlier than 0:1.0.8-0.2.el4 OR seamonkey-chat is earlier than 0:1.0.8-0.2.el4 OR seamonkey-nss is earlier than 0:1.0.8-0.2.el4 OR seamonkey-devel is earlier than 0:1.0.8-0.2.el4 OR seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.10-2.el5 OR yelp is earlier than 0:2.16.0-14.0.1.el5 OR devhelp-devel is earlier than 0:0.12-10.0.1.el5 OR devhelp is earlier than 0:0.12-10.0.1.el5 OR firefox is earlier than 0:1.5.0.10-2.el5 OR thunderbird is earlier than 0:1.5.0.10-1.el5
BACK