{"api_version":"1","generated_at":"2026-07-23T11:56:49+00:00","cve":"CVE-2008-0416","urls":{"html":"https://cve.report/CVE-2008-0416","api":"https://cve.report/api/cve/CVE-2008-0416.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0416","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0416"},"summary":{"title":"CVE-2008-0416","description":"Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox  before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) \"zero-length non-ASCII sequences\" in certain Asian character sets.","state":"PUBLISHED","assigner":"redhat","published_at":"2008-02-12 03:00:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.debian.org/security/2008/dsa-1489","name":"http://www.debian.org/security/2008/dsa-1489","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1489-1 iceweasel","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html","name":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-13.html","name":"http://www.mozilla.org/security/announce/2008/mfsa2008-13.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"MFSA 2008-13: Multiple XSS vulnerabilities from character encoding","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2008/dsa-1485","name":"http://www.debian.org/security/2008/dsa-1485","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1485-2 icedove","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.turbolinux.com/security/2008/TLSA-2008-9.txt","name":"http://www.turbolinux.com/security/2008/TLSA-2008-9.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"404 Not Found","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","name":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Mozilla products: Multiple vulnerabilities — Gentoo Linux Documentation","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30620","name":"http://secunia.com/advisories/30620","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Sun Solaris Firefox Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://secunia.com/advisories/28865","name":"http://secunia.com/advisories/28865","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Debian update for icedove - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2008/dsa-1484","name":"http://www.debian.org/security/2008/dsa-1484","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1484-1 xulrunner","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","name":"http://www.vupen.com/english/advisories/2008/2091/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/29541","name":"http://secunia.com/advisories/29541","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Ubuntu update for firefox - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161","name":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug List","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/576-1/","name":"https://usn.ubuntu.com/576-1/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-576-1: Firefox vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","name":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA08-087A -- Mozilla Updates for Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40488","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40488","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/28879","name":"http://secunia.com/advisories/28879","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Debian update for xulrunner - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/28864","name":"http://secunia.com/advisories/28864","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Debian update for iceweasel - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30327","name":"http://secunia.com/advisories/30327","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Gentoo Update for Mozilla Products - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/29303","name":"http://www.securityfocus.com/bid/29303","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Mozilla Firefox/Thunderbird/SeaMonkey Character Encoding Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/28839","name":"http://secunia.com/advisories/28839","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Ubuntu update for firefox - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","name":"http://www.vupen.com/english/advisories/2008/1793/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-592-1","name":"http://www.ubuntu.com/usn/usn-592-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-592-1: Firefox vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/31043","name":"http://secunia.com/advisories/31043","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Sun Solaris Thunderbird Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/en/jp/JVN21563357/index.html","name":"http://jvn.jp/en/jp/JVN21563357/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVN#21563357 Mozilla Firefox cross-site scripting vulnerability","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252,381412,407161","name":"MISC:https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252,381412,407161","refsource":"MITRE","tags":[],"title":"Bug List","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0416","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0416","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"416","vulnerable":"1","versionEndIncluding":"2.0.0.11","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"416","vulnerable":"1","versionEndIncluding":"1.1.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"416","vulnerable":"1","versionEndIncluding":"2.0.0.11","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T07:46:54.440Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"TLSA-2008-9","tags":["vendor-advisory","x_refsource_TURBO","x_transferred"],"url":"http://www.turbolinux.com/security/2008/TLSA-2008-9.txt"},{"name":"29541","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29541"},{"name":"firefox-character-encoding-xss(40488)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40488"},{"name":"JVNDB-2008-000021","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html"},{"name":"30620","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30620"},{"name":"28865","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28865"},{"name":"28879","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28879"},{"name":"30327","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30327"},{"name":"238492","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"},{"name":"USN-592-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/usn-592-1"},{"name":"DSA-1489","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2008/dsa-1489"},{"name":"239546","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"},{"name":"28864","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28864"},{"name":"DSA-1485","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2008/dsa-1485"},{"name":"ADV-2008-1793","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1793/references"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161"},{"name":"ADV-2008-2091","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2091/references"},{"name":"JVN#21563357","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN21563357/index.html"},{"name":"TA08-087A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-13.html"},{"name":"DSA-1484","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2008/dsa-1484"},{"name":"29303","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/29303"},{"name":"GLSA-200805-18","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"},{"name":"31043","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31043"},{"name":"28839","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28839"},{"name":"USN-576-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/576-1/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-02-08T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox  before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) \"zero-length non-ASCII sequences\" in certain Asian character sets."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-03T20:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"TLSA-2008-9","tags":["vendor-advisory","x_refsource_TURBO"],"url":"http://www.turbolinux.com/security/2008/TLSA-2008-9.txt"},{"name":"29541","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29541"},{"name":"firefox-character-encoding-xss(40488)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40488"},{"name":"JVNDB-2008-000021","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html"},{"name":"30620","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30620"},{"name":"28865","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28865"},{"name":"28879","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28879"},{"name":"30327","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30327"},{"name":"238492","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"},{"name":"USN-592-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/usn-592-1"},{"name":"DSA-1489","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2008/dsa-1489"},{"name":"239546","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"},{"name":"28864","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28864"},{"name":"DSA-1485","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2008/dsa-1485"},{"name":"ADV-2008-1793","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1793/references"},{"tags":["x_refsource_MISC"],"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161"},{"name":"ADV-2008-2091","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2091/references"},{"name":"JVN#21563357","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN21563357/index.html"},{"name":"TA08-087A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-13.html"},{"name":"DSA-1484","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2008/dsa-1484"},{"name":"29303","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/29303"},{"name":"GLSA-200805-18","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"},{"name":"31043","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31043"},{"name":"28839","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28839"},{"name":"USN-576-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/576-1/"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2008-0416","datePublished":"2008-02-12T02:00:00.000Z","dateReserved":"2008-01-23T00:00:00.000Z","dateUpdated":"2024-08-07T07:46:54.440Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-02-12 03:00:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"25E3F549-B010-49E4-B8F6-B22727D57AA6"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"416","Ordinal":"1","Title":"CVE-2008-0416","CVE":"CVE-2008-0416","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"416","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox  before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) \"zero-length non-ASCII sequences\" in certain Asian character sets.","Type":"Description","Title":"CVE-2008-0416"},{"CveYear":"2008","CveId":"416","Ordinal":"2","NoteData":"2008-02-11","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"416","Ordinal":"3","NoteData":"2018-10-03","Type":"Other","Title":"Modified"}]}}}