Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Firefox: serious cookie stealing / same-domain bypass vulnerability Feb 14 2007 10:23PM
Michal Zalewski (lcamtuf dione ids pl)
There is a serious vulnerability in Mozilla Firefox, tested with 2.0.0.1,
but quite certainly affecting all recent versions.

The problem lies in how Firefox handles writes to the 'location.hostname'
DOM property. It is possible for a script to set it to values that would
not otherwise be accepted a...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus