Oval Definition:	oval:org.mitre.oval:def:21788
Revision Date: 2014-05-26 Version: 65 Title: ELSA-2007:0097: firefox security update (Critical) Description: The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2006-6077 CVE-2007-0008 CVE-2007-0009 CVE-2007-0775 CVE-2007-0777 CVE-2007-0778 CVE-2007-0779 CVE-2007-0780 CVE-2007-0800 CVE-2007-0981 CVE-2007-0994 CVE-2007-0995 CVE-2007-0996 ELSA-2007:0097-02 Platform(s): Oracle Linux 5 Product(s): devhelp firefox yelp Definition Synopsis Oracle Linux 5.x AND rpm test devhelp is earlier than 0:0.12-10.0.1.el5 OR devhelp-devel is earlier than 0:0.12-10.0.1.el5 OR yelp is earlier than 0:2.16.0-14.0.1.el5 OR firefox-devel is earlier than 0:1.5.0.10-2.el5 OR firefox is earlier than 0:1.5.0.10-2.el5
BACK