Secunia

Two vulnerabilities have been reported in the Firebug extension for Mozilla Firefox, which can be exploited by malicious people to compromise a vulnerable system.

1) Input passed to the "console.log()" function is not properly sanitised and can be exploited to e.g. execute arbitrary script code within the "chrome:" context by tricking a user into visiting a malicious website.

2) Results of the "toString" method when processing function objects are not properly sanitised before being used. This can be exploited to e.g. execute arbitrary script code within the "chrome:" context by overriding the "toString" method with a specially crafted function.

The vulnerabilities are reported in versions prior to 1.04.

Solution
Update to version 1.04.

Provided and/or discovered by
1) pdp
2) Thor Larholm

Changelog
Further details available in Customer Area

Original Advisory
pdp:
http://www.gnucitizen.org/blog/firebug-goes-evil

Thor Lalholm:
http://larholm.com/2007/04/06/more-0day-in-firebug/

Deep Links
Links available in Customer Area