|
Mozilla Firefox Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA36001
|
|
|
Release Date:
|
2009-07-27
|
|
Last Update:
|
2009-08-07
|
|
Popularity:
|
10,575 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
System access
Spoofing
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Mozilla Firefox 3.0.x
Mozilla Firefox 3.5.x
|
|
|
Binary Analysis:
|
BA800 :: Available for 1 Credit 
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to conduct spoofing attacks or potentially compromise a user's system.
1) An error when opening a new window for a malformed domain can be exploited to display an arbitrary URL in the address bar of a child window by issuing a "window.open()" call with a domain containing e.g. "%20" characters.
2) Various unspecified errors in the browser engine may result in memory corruption and could possibly allow execution of arbitrary code.
3) A combination of a web page with a "Link:" HTTP header and an installed add-on implementing a "Content Policy" in JavaScript (e.g. AdBlock Plus or NoScript) may cause the window's global object to receive an incorrect security wrapper. This can be exploited to execute arbitrary JavaScript with chrome privileges.
NOTE: A bug when receiving replies containing DNS names longer than 15 characters from SOCKS5 proxies may corrupt the subsequent data stream in the response. According to the vendor, there was no evidence of memory corruption.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
