Mozilla · Thunderbird · CVE-2010-1210
**Name of the Vulnerable Software and Affected Versions**
Mozilla Firefox versions prior to 3.6.7
Thunderbird versions prior to 3.1.1
**Description**
The issue involves the insertion of a U+FFFD sequence into text under certain circumstances, potentially making it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text. This could be exploited by attackers using specially crafted text.
**Recommendations**
For Mozilla Firefox versions prior to 3.6.7, update to version 3.6.7 or later to resolve the issue.
For Thunderbird versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue.