NetSight
IP …
medium4.3

CVE-2013-5612

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web …

Impact

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.

Affected products

VendorProductAffected versions
MozillaFirefox
before 26.0
MozillaSeamonkey
before 2.23
FedoraprojectFedora
Versions 19, 20
OracleSolaris
Version 11.3
CanonicalUbuntu Linux
Versions 12.04, 12.10, 13.04, 13.10
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.5
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 6.5
RedhatEnterprise Linux Server Eus
Version 6.5
RedhatEnterprise Linux Server Tus
Version 6.5
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0

Weakness classification

CWE-79

References