Red Hat, Inc. Information for VU#592425
Mozilla-based products fail to validate user input to the attribute name in "XULDocument.persist"
- Vendor Information Help Date Notified:
- Statement Date:
- Date Updated: 08 Feb 2006
Updated Mozilla and Firefox packages for Red Hat Enterprise Linux 2.1, 3,
and 4 to correct this issue are available at the URL below and by using
the Red Hat Network 'up2date' tool.
The vendor has not provided us with any further information regarding this vulnerability.
Red Hat, Inc. has published Red Hat Security Advisories RHSA-2006:0199 and RHSA-2006:0200 in response to this issue. Users are encouraged to review these advisories and apply the patches they refer to, as appropriate
If you have feedback, comments, or additional information about this vulnerability, please send us email.