Mozilla Firefox 'window.location' Same Origin Policy Security Bypass Vulnerability

Bugtraq ID:	38919
Class:	Design Error
CVE:	CVE-2010-0170
Remote:	Yes
Local:	No
Published:	Mar 23 2010 12:00AM
Updated:	Apr 20 2010 09:52PM
Credit:	Blake Kaplan
Vulnerable:	Mozilla Firefox 3.6 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5

Not Vulnerable:	Mozilla Firefox 3.6.2