CVE-2010-1210

intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text.

• mozilla firefox (<= 3.6.6) • mozilla firefox 0.1 • mozilla firefox 0.2 • mozilla firefox 0.3 • mozilla firefox 0.4 • mozilla firefox 0.5 • mozilla firefox 0.6 • mozilla firefox 0.6.1 • mozilla firefox 0.7 • mozilla firefox 0.7.1 • mozilla firefox 0.8 • mozilla firefox 0.9 • mozilla firefox 0.9.1 • mozilla firefox 0.9.2 • mozilla firefox 0.9.3 • mozilla firefox 0.10 • mozilla firefox 0.10.1 • mozilla firefox 1.0 • mozilla firefox 1.0.1 • mozilla firefox 1.0.2 • mozilla firefox 1.0.3 • mozilla firefox 1.0.4 • mozilla firefox 1.0.5 • mozilla firefox 1.0.6 • mozilla firefox 1.0.7 • mozilla firefox 1.0.8 • mozilla firefox 1.4.1 • mozilla firefox 1.5 • mozilla firefox 1.5.0.1 • mozilla firefox 1.5.0.2 • mozilla firefox 1.5.0.3 • mozilla firefox 1.5.0.4 • mozilla firefox 1.5.0.5 • mozilla firefox 1.5.0.6 • mozilla firefox 1.5.0.7 • mozilla firefox 1.5.0.8 • mozilla firefox 1.5.0.9 • mozilla firefox 1.5.0.10 • mozilla firefox 1.5.0.11 • mozilla firefox 1.5.0.12 • mozilla firefox 1.5.1 • mozilla firefox 1.5.2 • mozilla firefox 1.5.3 • mozilla firefox 1.5.4 • mozilla firefox 1.5.5 • mozilla firefox 1.5.6 • mozilla firefox 1.5.7 • mozilla firefox 1.5.8 • mozilla firefox 1.8 • mozilla firefox 2.0 • mozilla firefox 2.0.0.1 • mozilla firefox 2.0.0.2 • mozilla firefox 2.0.0.3 • mozilla firefox 2.0.0.4 • mozilla firefox 2.0.0.5 • mozilla firefox 2.0.0.6 • mozilla firefox 2.0.0.7 • mozilla firefox 2.0.0.8 • mozilla firefox 2.0.0.9 • mozilla firefox 2.0.0.10 … and 116 more