Red Hat, Inc. Information for VU#592425

Mozilla-based products fail to validate user input to the attribute name in "XULDocument.persist"

Status

Affected

Vendor Statement

Updated Mozilla and Firefox packages for Red Hat Enterprise Linux 2.1, 3,

and 4 to correct this issue are available at the URL below and by using
the Red Hat Network 'up2date' tool.

https://rhn.redhat.com/cve/CVE-2006-0296.html

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

Red Hat, Inc. has published Red Hat Security Advisories RHSA-2006:0199 and RHSA-2006:0200 in response to this issue. Users are encouraged to review these advisories and apply the patches they refer to, as appropriate

If you have feedback, comments, or additional information about this vulnerability, please send us email.