CVE-2007-0996: XSS
The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0996?
CVE-2007-0996 is classified as a moderate severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2007-0996?
To fix CVE-2007-0996, update to the patched versions of Mozilla Firefox (2.0.0.2 or later) or SeaMonkey (1.0.8 or later).
What types of attacks are possible with CVE-2007-0996?
CVE-2007-0996 allows attackers to conduct cross-site scripting (XSS) attacks by injecting malicious scripts into trusted web pages.
Which software versions are affected by CVE-2007-0996?
CVE-2007-0996 affects Mozilla Firefox versions prior to 1.5.0.10 and 2.x before 2.0.0.2, as well as SeaMonkey versions before 1.0.8.
Is CVE-2007-0996 still relevant today?
While CVE-2007-0996 is an older vulnerability, it highlights important security risks related to incorrect charset handling in web browsers.