Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092.
References
Link | Resource |
---|---|
http://marc.info/?l=full-disclosure&m=117258301222007&w=2 | Third Party Advisory |
http://marc.info/?l=full-disclosure&m=117259225402112&w=2 | Third Party Advisory |
http://osvdb.org/35913 | Broken Link |
http://www.securityfocus.com/archive/1/461437/100/0/threaded |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2007-03-03 20:19
Updated : 2024-02-04 17:13
NVD link : CVE-2007-1256
Mitre link : CVE-2007-1256
CVE.ORG link : CVE-2007-1256
JSON object : View
Products Affected
mozilla
- firefox
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer