Reflected cross-site scripting (XSS) In nspr
Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:3.0.5-1.el5_2 | ||
rpm rhel5 | 0:4.7.3-2.el5 | ||
rpm rhel5 | 0:3.12.2.0-2.el5 | ||
rpm rhel5 | 0:2.0.0.19-1.el5_2 | ||
rpm rhel5 | 0:1.9.0.5-1.el5_2 |
Aliases
1. 2. 3.