Oval Definition:
oval:org.mitre.oval:def:1150
Revision Date
:
2007-05-09
Version
:
3
Title
:
Crash on "zero-width non-joiner" Sequence
Description
:
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2005-2702
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows NT
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s)
:
mozilla
Definition Synopsis
Mozilla Suite version 1.7.10 or earlier is installed
Mozilla Suite version 1.7.10 or earlier is installed
AND
Mozilla Suite version 1.7.10 or earlier is installed
OR
Mozilla Firefox version 1.0.6 or earlier is installed
Firefox version 1.0.6 or earlier is installed
AND
Mozilla Firefox version 1.0.6 or earlier is installed
BACK