VULNERABILITY INTELLIGENCE

CVE-2008-5510

CVSS score5 MEDIUM
EPSS probability2.21%
CISA KEVNot currently listed
Published2008-12-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.

Primary references