CVE:CVE-2008-0416
CNNVD:CNNVD-200802-143
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 2.0.0.12之前版本存在跨站脚本漏洞。攻击者利用该漏洞通过某些字符编码可以注入任意Web脚本或HTML。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.11,and avoid the version (,2.0.0.11]; Upgrade mozilla seamonkey to a higher version than 1.1.7,and avoid the version (,1.1.7]; Upgrade mozilla thunderbird to a higher version than 2.0.0.11,and avoid the version (,2.0.0.11]