CVE ID:	CVE-2008-0416
Description:	Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) "zero-length non-ASCII sequences" in certain Asian character sets.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0416 238492 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 239546 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 28839 http://secunia.com/advisories/28839 28864 http://secunia.com/advisories/28864 28865 http://secunia.com/advisories/28865 28879 http://secunia.com/advisories/28879 29303 http://www.securityfocus.com/bid/29303 29541 http://secunia.com/advisories/29541 30327 http://secunia.com/advisories/30327 30620 http://secunia.com/advisories/30620 31043 http://secunia.com/advisories/31043 ADV-2008-1793 http://www.vupen.com/english/advisories/2008/1793/references ADV-2008-2091 http://www.vupen.com/english/advisories/2008/2091/references DSA-1484 http://www.debian.org/security/2008/dsa-1484 DSA-1485 http://www.debian.org/security/2008/dsa-1485 DSA-1489 http://www.debian.org/security/2008/dsa-1489 GLSA-200805-18 http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml JVN#21563357 http://jvn.jp/en/jp/JVN21563357/index.html JVNDB-2008-000021 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html TA08-087A http://www.us-cert.gov/cas/techalerts/TA08-087A.html TLSA-2008-9 http://www.turbolinux.com/security/2008/TLSA-2008-9.txt USN-576-1 https://usn.ubuntu.com/576-1/ USN-592-1 http://www.ubuntu.com/usn/usn-592-1 firefox-character-encoding-xss(40488) https://exchange.xforce.ibmcloud.com/vulnerabilities/40488 http://www.mozilla.org/security/announce/2008/mfsa2008-13.html http://www.mozilla.org/security/announce/2008/mfsa2008-13.html https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161 https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161