| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 1.5.0.10= 2.0= 2.0.0.1 | |
| seamonkey | ≤ 1.0.7 |
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free