{"id":"CVE-2009-5017","aliases":["EUVD-2009-4975","GHSA-p83q-cg3p-77f9","RHSA-2010:0500","RHSA-2010:0501"],"status":"published","title":"Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes...","description":"Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01831,"percentile":0.79027,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2010-11-12T21:00:00Z","modified":"2026-06-28T10:03:39Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-21.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-21.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-21.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"totem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"totem-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"totem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xulrunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xulrunner-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"xulrunner-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-21.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-21.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"esc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-12.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"esc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-12.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnome-python2-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnome-python2-extras-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnome-python2-gtkhtml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnome-python2-gtkmozembed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnome-python2-gtkspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnome-python2-libegg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"totem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"totem-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"totem-mozplugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xulrunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xulrunner-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xulrunner-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"yelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-26.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"yelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-26.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-21.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-21.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-21.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"esc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-12.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"esc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-12.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.4-8.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnome-python2-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnome-python2-extras-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnome-python2-gtkhtml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnome-python2-gtkmozembed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnome-python2-gtkspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnome-python2-libegg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"totem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"totem-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"totem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"totem-mozplugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.7-7.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xulrunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xulrunner-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xulrunner-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2.4-10.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"yelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-26.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"yelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-26.el5"}]}],"bundled":12}],"products":[{"vendor":"mozilla","product":"firefox"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511859","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=522634","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://hg.mozilla.org/releases/mozilla-1.9.2/rev/e42c563313a0","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-5017","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p83q-cg3p-77f9"},{"url":"https://access.redhat.com/errata/RHSA-2010:0500","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://mozilla.com/en-US/firefox/3.6.4/releasenotes/","tags":["article"]},{"url":"http://mozilla.com/en-US/firefox/3.6/releasenotes/","tags":["article"]},{"url":"http://mozilla.org/security/known-vulnerabilities/firefox35.html","tags":["article"]},{"url":"http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.4","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=480938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=577029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=577584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=586580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=590804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=590810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=590816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=590828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=590830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=590833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=590850","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0500.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-5913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5913","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-5017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656287","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-5017","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0182","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0182","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1125","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1125","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1196","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1197","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1197","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1198","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1199","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1199","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1199","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1200","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1200","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1202","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1202","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1203","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0501","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0501.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-5017","description":"Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.","status":"published","published":"2010-11-12T21:00:00Z","modified":"2024-09-16T17:44:04.707Z","updated_at":"2026-11-02T14:33:23.041383Z"}],"euvd":[{"id":"EUVD-2009-4975","description":"Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.","status":"published","published":"2010-11-12T21:00:00Z","modified":"2024-09-16T17:44:04Z","updated_at":"2026-11-03T00:55:39.247967Z"}],"ghsa":[{"id":"GHSA-p83q-cg3p-77f9","title":"Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes...","description":"Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.","status":"published","published":"2022-05-02T04:00:27Z","modified":"2023-01-31T05:09:22Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:49:30.42259Z"}],"nvd":[{"id":"CVE-2009-5017","description":"Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.","status":"published","published":"2010-11-12T22:00:01.923Z","modified":"2026-06-16T23:14:50.163Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:38.684719Z"}],"osv":[{"id":"RHSA-2010:0500","title":"Red Hat Security Advisory: firefox security, bug fix, and enhancement update","status":"published","published":"2024-09-15T18:24:01Z","modified":"2026-06-28T10:03:38Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0501","title":"Red Hat Security Advisory: firefox security, bug fix, and enhancement update","status":"published","published":"2024-09-15T18:24:07Z","modified":"2026-06-28T10:03:39Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}