Lack of data validation - Modify DOM Elements In devhelp
Description
Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:0.12-18.el5 | ||
rpm rhel5 | 0:3.0.1-1.el5 | ||
rpm rhel5 | 0:0.9.91.5-22.el5 | ||
rpm rhel5 | 0:1.9.0.1-1.el5 | ||
rpm rhel5 | 0:2.16.0-20.el5 |
Aliases
1. 2. 3.