CVE ID:	CVE-2007-0995
Description:	Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.
Test IDs:	1.3.6.1.4.1.25623.1.0.58468
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0995 1017702 http://www.securitytracker.com/id?1017702 20070202-01-P ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc 20070226 rPSA-2007-0040-1 firefox http://www.securityfocus.com/archive/1/461336/100/0/threaded 20070301-01-P ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc 20070303 rPSA-2007-0040-3 firefox thunderbird http://www.securityfocus.com/archive/1/461809/100/0/threaded 22694 http://www.securityfocus.com/bid/22694 24205 http://secunia.com/advisories/24205 24238 http://secunia.com/advisories/24238 24287 http://secunia.com/advisories/24287 24290 http://secunia.com/advisories/24290 24293 http://secunia.com/advisories/24293 24320 http://secunia.com/advisories/24320 24328 http://secunia.com/advisories/24328 24333 http://secunia.com/advisories/24333 24342 http://secunia.com/advisories/24342 24343 http://secunia.com/advisories/24343 24384 http://secunia.com/advisories/24384 24393 http://secunia.com/advisories/24393 24395 http://secunia.com/advisories/24395 24437 http://secunia.com/advisories/24437 24455 http://secunia.com/advisories/24455 24457 http://secunia.com/advisories/24457 24650 http://secunia.com/advisories/24650 25588 http://secunia.com/advisories/25588 32111 http://www.osvdb.org/32111 32112 http://osvdb.org/32112 ADV-2007-0718 http://www.vupen.com/english/advisories/2007/0718 ADV-2008-0083 http://www.vupen.com/english/advisories/2008/0083 DSA-1336 http://www.debian.org/security/2007/dsa-1336 FEDORA-2007-281 http://fedoranews.org/cms/node/2713 FEDORA-2007-293 http://fedoranews.org/cms/node/2728 GLSA-200703-04 http://security.gentoo.org/glsa/glsa-200703-04.xml GLSA-200703-08 http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml HPSBUX02153 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 MDKSA-2007:050 http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 RHSA-2007:0077 http://rhn.redhat.com/errata/RHSA-2007-0077.html RHSA-2007:0078 http://www.redhat.com/support/errata/RHSA-2007-0078.html RHSA-2007:0079 http://www.redhat.com/support/errata/RHSA-2007-0079.html RHSA-2007:0097 http://www.redhat.com/support/errata/RHSA-2007-0097.html RHSA-2007:0108 http://www.redhat.com/support/errata/RHSA-2007-0108.html SSA:2007-066-03 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 SSA:2007-066-05 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 SSRT061181 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 SUSE-SA:2007:019 http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html SUSE-SA:2007:022 http://www.novell.com/linux/security/advisories/2007_22_mozilla.html USN-428-1 http://www.ubuntu.com/usn/usn-428-1 http://ha.ckers.org/xss.html#XSS_Non_alpha_non_digit2 http://ha.ckers.org/xss.html#XSS_Non_alpha_non_digit2 http://www.mozilla.org/security/announce/2007/mfsa2007-02.html http://www.mozilla.org/security/announce/2007/mfsa2007-02.html https://issues.rpath.com/browse/RPL-1081 https://issues.rpath.com/browse/RPL-1081 https://issues.rpath.com/browse/RPL-1103 https://issues.rpath.com/browse/RPL-1103 oval:org.mitre.oval:def:10164 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10164