NetSight
high7.5

CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unico…

Impact

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.

Affected products

VendorProductAffected versions
MozillaFirefox
through 1.0.6
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaMozilla Suite
through 1.7.11
Versions 1.7.6, 1.7.7, 1.7.8, 1.7.10

References