CVE-2008-1080

Related Files

Gentoo Linux Security Advisory 200803-9

Posted Mar 4, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200803-09 - Mozilla discovered that Opera does not handle input to file form fields properly, allowing scripts to manipulate the file path (CVE-2008-1080). Max Leonov found out that image comments might be treated as scripts, and run within the wrong security context (CVE-2008-1081). Arnaud reported that a wrong representation of DOM attribute values of imported XML documents allows them to bypass sanitization filters (CVE-2008-1082). Versions less than 9.26 are affected.

tags | advisory

systems | linux, gentoo

advisories | CVE-2008-1080, CVE-2008-1081, CVE-2008-1082

SHA-256 | 96ef9d751d4281e382b6b98437b55fbf3bb51748f4beba8b578cf9690f41b735

Download | Favorite | View