Upstream information
CVE-2007-0995 at MITRE
Description
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.
NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Novell/SUSE information
Novell Bugzilla entry:
244923
SUSE Security Advisories:
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|
| SUSE LINUX 10.1 | seamonkey >= 1.0.8-0.1seamonkey-calendar >= 1.0.8-0.1seamonkey-dom-inspector >= 1.0.8-0.1seamonkey-irc >= 1.0.8-0.1seamonkey-mail >= 1.0.8-0.1seamonkey-spellchecker >= 1.0.8-0.1seamonkey-venkman >= 1.0.8-0.1
| |
Novell Linux Desktop 9 for x86
Novell Linux Desktop 9 for x86_64 | MozillaFirefox >= 1.5.0.10-0.2MozillaFirefox-translations >= 1.5.0.10-0.2
| Builds
YOU Patch Nr: 11446 |
| Novell Linux Desktop 9 for x86 | mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-cs >= 1.8_seamonkey_1.0.4-0.4mozilla-deat >= 1.8_seamonkey_1.0.4-0.4mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-hu >= 1.80_seamonkey_1.0.4-2mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1
| core9.s390
core9.x86
YOU Patch Nr: 11458 |
| Novell Linux Desktop 9 for x86_64 | mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-cs >= 1.8_seamonkey_1.0.4-0.4mozilla-deat >= 1.8_seamonkey_1.0.4-0.4mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-hu >= 1.80_seamonkey_1.0.4-2mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-lib64 >= 1.6-0.8mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1
| core9.s390
core9.x86
YOU Patch Nr: 11458 |
| Open Enterprise Server | mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-calendar >= 1.8_seamonkey_1.0.8-0.1mozilla-cs >= 1.8_seamonkey_1.0.4-0.4mozilla-deat >= 1.8_seamonkey_1.0.4-0.4mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-hu >= 1.80_seamonkey_1.0.4-2mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1
| core9.s390
core9.x86
YOU Patch Nr: 11458 |
SUSE LINUX 10.0
SUSE LINUX 10.1
SUSE LINUX 9.3 | MozillaFirefox >= 1.5.0.10-0.2MozillaFirefox-translations >= 1.5.0.10-0.2
| |
| SUSE LINUX 10.0 | mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-calendar >= 1.8_seamonkey_1.0.8-0.1mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-ko >= 1.75-3.2mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-spellchecker >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1mozilla-zh-CN >= 1.7-6.2mozilla-zh-TW >= 1.7-6.2
| |
| SUSE LINUX 9.3 | galeon >= 2.0.0-28.2mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-32bit >= 9.3-7.6mozilla-calendar >= 1.8_seamonkey_1.0.8-0.1mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-ko >= 1.72-4.2mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-spellchecker >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1mozilla-zh-CN >= 1.7-4.2mozilla-zh-TW >= 1.7-4.2
| |
SUSE LINUX Retail Solution 8
SuSE Linux Enterprise Server 8 for AMD64
SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries
SuSE Linux Enterprise Server 8 for IBM zSeries
SuSE Linux Enterprise Server 8 for IPF
SuSE Linux Openexchange Server 4
SuSE Linux School Server for i386
SuSE Linux Standard Server 8
UnitedLinux 1.0 | mozilla >= 1.8_seamonkey_1.0.8-0.3mozilla-calendar >= 1.8_seamonkey_1.0.8-0.3mozilla-devel >= 1.8_seamonkey_1.0.8-0.3mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.3mozilla-irc >= 1.8_seamonkey_1.0.8-0.3mozilla-mail >= 1.8_seamonkey_1.0.8-0.3mozilla-spellchecker >= 1.8_seamonkey_1.0.8-0.3mozilla-venkman >= 1.8_seamonkey_1.0.8-0.3mozilla-xmlterm >= 1.8_seamonkey_1.0.8-0.3
| slrs8.x86
ul1.s390
YOU Patch Nr: 11459 |
