|
Mozilla / Mozilla Firefox / Camino Tabbed Browsing Vulnerabilities
|
|
|
|
|
Secunia Advisory:
|
SA12712
|
|
|
Release Date:
|
2004-10-20
|
|
Last Update:
|
2005-03-22
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Spoofing
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Camino 0.x
Mozilla 1.7.x
Mozilla Firefox 0.x
Mozilla Firefox 1.x
|
| | CVE reference: | CVE-2004-1380 (Secunia mirror)
CVE-2004-1381 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
Secunia Research has discovered two vulnerabilities in Mozilla, Mozilla Firefox, and Camino, which can be exploited by malicious web sites to obtain sensitive information and spoof dialog boxes.
1) Inactive tabs can launch dialog boxes so they appear to be displayed by a web site in another tab. This can be exploited by a malicious web site to show a dialog box, which seems to originate from a trusted web site.
Successful exploitation would normally require that a user is tricked into opening a link from a malicious web site to a trusted web site in a new tab.
A test is available here:
http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
The vulnerability has been confirmed in the following versions:
* Mozilla 1.7.2 and 1.7.3
* Mozilla Firefox 0.10.1
* Mozilla Firefox 1.0 (affected by variant)
* Camino 0.8
2) Inactive tabs can gain focus from form fields on web sites in another tab. This can potentially be exploited to collect sensitive data entered in form fields on other web sites.
Successful exploitation would normally require that a user is tricked into opening a link from a malicious web site to a trusted web site in a new tab.
A test is available here:
http://secunia.com/multiple_browsers_form_field_focus_test/
The vulnerability has been confirmed in the following versions:
* Mozilla 1.7.2 and 1.7.3
* Mozilla Firefox 0.10.1
Other versions may also be vulnerable.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector.
Solution:
Mozilla Firefox:
Update to version 1.0.1.
http://www.mozilla.org/products/firefox/
Mozilla:
Update to version 1.7.6.
http://www.mozilla.org/products/mozilla1.x/
Camino:
The vulnerability has been fixed in the CVS repository.
Don't visit trusted web sites while visiting untrusted web sites or disable JavaScript.
Provided and/or discovered by:
Jakob Balle, Secunia Research.
Changelog:
2004-10-25: Added link to Mozilla bug report.
2004-11-09: Updated "Solution" section.
2004-12-06: Firefox is still affected by a variant of the first vulnerability. Added "Firefox 1.x" as vulnerable.
2005-01-31: Added CVE references.
2005-02-25: Mozilla Firefox 1.0.1 released. Updated "Solution" section.
2005-03-22: Mozilla 1.7.6 released. Updated "Solution" section.
Original Advisory:
Secunia:
http://secunia.com/secunia_research/2004-10/
Mozilla:
https://bugzilla.mozilla.org/show_bug.cgi?id=262887
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
78 Related Secunia Security Advisories, displaying 10
|
|
|
1. Firefox "-chrome" Parameter Security Issue
|
|
2. Firefox "OnKeyDown" Event Focus Weakness
|
|
3. Mozilla Firefox / Seamonkey "resource://" Information Disclosure
|
|
4. Mozilla Firefox Multiple Vulnerabilities
|
|
5. Mozilla Firefox Multiple Vulnerabilities
|
|
6. Mozilla Firefox "locations.hostname" DOM Property Handling Vulnerability
|
|
7. Mozilla Firefox Multiple Vulnerabilities
|
|
8. Firefox Password Manager Information Disclosure
|
|
9. Mozilla Firefox and SeaMonkey Multiple Vulnerabilities
|
|
10. Mozilla Firefox Multiple Vulnerabilities
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
