CVE-2012-4207 in Firefox
Summary
The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a ~ (tilde) character in proximity to a chunk delimiter, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
08/08/2012
Disclosure
11/21/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 6977 | Mozilla Firefox/Thunderbird HZ-GB-2312 Charset cross site scripting | 79 | High | Official fix | CVE-2012-4207 |