CVE-2007-0995: XSS
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0995?
CVE-2007-0995 is considered a moderate severity vulnerability as it can allow remote attackers to bypass content filters.
How do I fix CVE-2007-0995?
To fix CVE-2007-0995, users should update to the latest versions of Mozilla Firefox or SeaMonkey that address this vulnerability.
Which software versions are affected by CVE-2007-0995?
CVE-2007-0995 affects Mozilla Firefox versions prior to 1.5.0.10 and 2.x before 2.0.0.2, as well as SeaMonkey versions before 1.0.8.
What type of attack can CVE-2007-0995 enable?
CVE-2007-0995 enables attackers to exploit invalid HTML characters in attribute names to bypass content security measures.
Is it safe to use versions impacted by CVE-2007-0995?
Using versions impacted by CVE-2007-0995 is not safe, as it could leave users vulnerable to potential cross-site scripting attacks.