[USN-717-3] Firefox vulnerabilities

Severity Medium

CVEs 2

firefox vulnerabilities

Kojima Hajime discovered that Firefox did not properly handle an escaped null
character. An attacker may be able to exploit this flaw to bypass script
sanitization. (CVE-2008-5510)

Wladimir Palant discovered that Firefox did not restrict access to cookies in
HTTP response headers. If a user were tricked into opening a malicious web
page, a remote attacker could view sensitive information. (CVE-2009-0357)

ID

USN-717-3

Severity

medium

Severity from

CVE-2008-5510

URL

https://ubuntu.com/security/notices/USN-717-3

Published