Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-52n3-8f9y-uqe2

Summary

WebKit developer Alexey Proskuryakov reported that 
the Mozilla HTML parser treated the backspace character as whitespace
contrary to the HTML specification and different from other browsers.
This difference might lead to Cross-site Scripting (XSS) risks on sites
which filtered input in accordance with the specification.Yosuke Hasegawa reported a flaw in the way Mozilla
parses the control character 0x80 under Shift_JIS encoding. This flaw could
potentially be used to evade web-site input filters and result in a XSS
attack hazard. While investigating, Mozilla developer Simon
Montagu discovered several variants of this flaw involving zero-length
non-ASCII sequences in ISO-2022-JP, ISO-2022-CN, ISO-2022-KR, and HZ-GB-2312.
These flaws were fixed in and prior to Firefox 2.0.0.12
but the announcement was held until other browser vendors could fix related
flaws.

Aliases

alias	CVE-2008-0416

Fixed_packages

url	pkg:ebuild/mail-client/mozilla-thunderbird@2.0.0.14
purl	pkg:ebuild/mail-client/mozilla-thunderbird@2.0.0.14
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/mozilla-thunderbird@2.0.0.14

url	pkg:ebuild/mail-client/mozilla-thunderbird-bin@2.0.0.14
purl	pkg:ebuild/mail-client/mozilla-thunderbird-bin@2.0.0.14
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/mozilla-thunderbird-bin@2.0.0.14

url	pkg:ebuild/net-libs/xulrunner@1.1.9
purl	pkg:ebuild/net-libs/xulrunner@1.1.9
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.1.9

url	pkg:ebuild/net-libs/xulrunner@1.1.9-r1
purl	pkg:ebuild/net-libs/xulrunner@1.1.9-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.1.9-r1

url	pkg:ebuild/net-libs/xulrunner@1.8.1.14
purl	pkg:ebuild/net-libs/xulrunner@1.8.1.14
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.8.1.14

url	pkg:ebuild/net-libs/xulrunner@2.0.0.14
purl	pkg:ebuild/net-libs/xulrunner@2.0.0.14
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@2.0.0.14

url	pkg:ebuild/www-client/mozilla-firefox@2.0.0.14
purl	pkg:ebuild/www-client/mozilla-firefox@2.0.0.14
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/mozilla-firefox@2.0.0.14

url	pkg:ebuild/www-client/mozilla-firefox-bin@2.0.0.14
purl	pkg:ebuild/www-client/mozilla-firefox-bin@2.0.0.14
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/mozilla-firefox-bin@2.0.0.14

url	pkg:ebuild/www-client/seamonkey@1.1.9-r1
purl	pkg:ebuild/www-client/seamonkey@1.1.9-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@1.1.9-r1

url	pkg:ebuild/www-client/seamonkey@2.0.0.14
purl	pkg:ebuild/www-client/seamonkey@2.0.0.14
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@2.0.0.14

url	pkg:ebuild/www-client/seamonkey-bin@1.1.9
purl	pkg:ebuild/www-client/seamonkey-bin@1.1.9
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@1.1.9

url	pkg:ebuild/www-client/seamonkey-bin@1.1.9-r1
purl	pkg:ebuild/www-client/seamonkey-bin@1.1.9-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@1.1.9-r1

url	pkg:ebuild/www-client/seamonkey-bin@2.0.0.14
purl	pkg:ebuild/www-client/seamonkey-bin@2.0.0.14
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@2.0.0.14

url	pkg:mozilla/SeaMonkey@1.1.8
purl	pkg:mozilla/SeaMonkey@1.1.8
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@1.1.8

Affected_packages

url pkg:rpm/redhat/firefox@1.5.0.12-0.10?arch=el4

purl pkg:rpm/redhat/firefox@1.5.0.12-0.10?arch=el4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2dyf-9tzk-1ucm

vulnerability	VCID-52n3-8f9y-uqe2

vulnerability	VCID-6bc6-xdg7-sqew

vulnerability	VCID-ftx3-d7j8-skep

vulnerability	VCID-jbys-r4mj-cydy

vulnerability	VCID-m4ge-x2x9-vyhd

vulnerability	VCID-nd9m-nqub-27a3

vulnerability	VCID-vnez-z562-73gr

vulnerability	VCID-vnfv-1da2-ekan

vulnerability	VCID-vxzf-uhr6-rycb

vulnerability	VCID-xayb-bkzz-zkfg

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@1.5.0.12-0.10%3Farch=el4

url pkg:rpm/redhat/firefox@1.5.0.12-9?arch=el5

purl pkg:rpm/redhat/firefox@1.5.0.12-9?arch=el5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2dyf-9tzk-1ucm

vulnerability	VCID-52n3-8f9y-uqe2

vulnerability	VCID-6bc6-xdg7-sqew

vulnerability	VCID-ftx3-d7j8-skep

vulnerability	VCID-jbys-r4mj-cydy

vulnerability	VCID-m4ge-x2x9-vyhd

vulnerability	VCID-nd9m-nqub-27a3

vulnerability	VCID-vnez-z562-73gr

vulnerability	VCID-vnfv-1da2-ekan

vulnerability	VCID-vxzf-uhr6-rycb

vulnerability	VCID-xayb-bkzz-zkfg

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@1.5.0.12-9%3Farch=el5

url pkg:rpm/redhat/seamonkey@1.0.9-0.9?arch=el3

purl pkg:rpm/redhat/seamonkey@1.0.9-0.9?arch=el3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27wg-hjuj-bqa7

vulnerability	VCID-2dyf-9tzk-1ucm

vulnerability	VCID-52n3-8f9y-uqe2

vulnerability	VCID-6bc6-xdg7-sqew

vulnerability	VCID-ftx3-d7j8-skep

vulnerability	VCID-jbys-r4mj-cydy

vulnerability	VCID-m4ge-x2x9-vyhd

vulnerability	VCID-nd9m-nqub-27a3

vulnerability	VCID-vnez-z562-73gr

vulnerability	VCID-vnfv-1da2-ekan

vulnerability	VCID-vxzf-uhr6-rycb

vulnerability	VCID-xayb-bkzz-zkfg

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/seamonkey@1.0.9-0.9%3Farch=el3

url pkg:rpm/redhat/seamonkey@1.0.9-0.9?arch=el2

purl pkg:rpm/redhat/seamonkey@1.0.9-0.9?arch=el2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27wg-hjuj-bqa7

vulnerability	VCID-2dyf-9tzk-1ucm

vulnerability	VCID-52n3-8f9y-uqe2

vulnerability	VCID-6bc6-xdg7-sqew

vulnerability	VCID-ftx3-d7j8-skep

vulnerability	VCID-jbys-r4mj-cydy

vulnerability	VCID-m4ge-x2x9-vyhd

vulnerability	VCID-nd9m-nqub-27a3

vulnerability	VCID-vnez-z562-73gr

vulnerability	VCID-vnfv-1da2-ekan

vulnerability	VCID-vxzf-uhr6-rycb

vulnerability	VCID-xayb-bkzz-zkfg

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/seamonkey@1.0.9-0.9%3Farch=el2

url pkg:rpm/redhat/seamonkey@1.0.9-9?arch=el4

purl pkg:rpm/redhat/seamonkey@1.0.9-9?arch=el4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27wg-hjuj-bqa7

vulnerability	VCID-2dyf-9tzk-1ucm

vulnerability	VCID-52n3-8f9y-uqe2

vulnerability	VCID-6bc6-xdg7-sqew

vulnerability	VCID-ftx3-d7j8-skep

vulnerability	VCID-jbys-r4mj-cydy

vulnerability	VCID-m4ge-x2x9-vyhd

vulnerability	VCID-nd9m-nqub-27a3

vulnerability	VCID-vnez-z562-73gr

vulnerability	VCID-vnfv-1da2-ekan

vulnerability	VCID-vxzf-uhr6-rycb

vulnerability	VCID-xayb-bkzz-zkfg

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/seamonkey@1.0.9-9%3Farch=el4

References

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0416.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0416.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2008-0416

reference_id

reference_type

scores

value	0.09262
scoring_system	epss
scoring_elements	0.92884
published_at	2026-06-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2008-0416

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=431740
reference_id	431740
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=431740

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0416
reference_id	CVE-2008-0416
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0416

reference_url	https://security.gentoo.org/glsa/200805-18
reference_id	GLSA-200805-18
reference_type
scores
url	https://security.gentoo.org/glsa/200805-18

reference_url

https://www.mozilla.org/en-US/security/advisories/mfsa2008-13

reference_id

mfsa2008-13

reference_type

scores

value	none
scoring_system	generic_textual
scoring_elements

url

https://www.mozilla.org/en-US/security/advisories/mfsa2008-13

reference_url	https://access.redhat.com/errata/RHSA-2008:0103
reference_id	RHSA-2008:0103
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2008:0103

reference_url	https://access.redhat.com/errata/RHSA-2008:0104
reference_id	RHSA-2008:0104
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2008:0104

reference_url	https://usn.ubuntu.com/576-1/
reference_id	USN-576-1
reference_type
scores
url	https://usn.ubuntu.com/576-1/

Weaknesses

Exploits

Severity_range_score null

Exploitability 0.5

Weighted_severity 0.1

Risk_score 0.1

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-52n3-8f9y-uqe2

Vulnerability Instance