Mozilla Firefox OnUnload Javascript Browser Entrapment Vulnerability

Threat level definition

Mozilla Firefox OnUnload Javascript Browser Entrapment Vulnerability

References:

Bug 371360 â?? scripts can tailgate departing users with onUnload (Mozilla)
Firefox onUnload script tailgating demo (Michal Zalewski)
Netscape Navigator Release Notes (Netscape)
Warpzilla Enhanced Gecko 1.8.1.8 Release Notes (WarpZilla Enhanced)
Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vuln (Michal Zalewski )
ASA-2007-447 Firefox security update (RHSA-2007-0979) (Avaya)
Mozilla Foundation Security Advisory 2007-30 (Mozilla)
RHSA-2007:0979-1 Critical: firefox security update (Red Hat)
RHSA-2007:0980-2 Critical: seamonkey security update (Red Hat)
RHSA-2007:0981-2 Moderate: thunderbird security update (Red Hat)
Solution 201516 : Multiple Security Vulnerabilities in Firefox and Thunderbir (Sun)
Sun Alert ID: 103177 (Sun Microsystems)

Privacy Statement
Copyright 2008, SecurityFocus