Security Advisory

CVE-2010-1197

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-06-23 18:00:00

Last updated 2024-08-07 01:14:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.

← Browse all CVEs View on cve.org ↗