Improper input validation in Mozilla Firefox

CVE-2009-3078

Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.022 (81.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References