BugTraq
Firefox 1.5.0.3 Flaw - Page can obtain path to Mozilla installation or profile by examining JavaScript exceptions May 21 2006 01:20PM
milw0rm gmail com
if the exception raises in some extension in the user profile and the page can catch path to the user profile and so a remote attacker will know the user login

PoC: https://bugzilla.mozilla.org/attachment.cgi?id=164547

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus