CVE-2008-4066: XSS
Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "jav�ascript" sequence, aka "HTML escaped low surrogates bug."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4066?
CVE-2008-4066 is classified as a moderate severity vulnerability due to its potential for XSS attacks.
How do I fix CVE-2008-4066?
To fix CVE-2008-4066, upgrade Mozilla Firefox to version 2.0.0.17 or later.
Which versions of Firefox are affected by CVE-2008-4066?
CVE-2008-4066 affects Mozilla Firefox versions 2.0.0.14, 2.0.0.15, and 2.0.0.16.
What kind of attacks can be conducted using CVE-2008-4066?
CVE-2008-4066 allows remote attackers to conduct cross-site scripting (XSS) attacks.
What are the implications of CVE-2008-4066 for web application security?
The implications of CVE-2008-4066 include potential exposure to XSS, allowing attackers to execute scripts in the context of the user's browser.