Lucene search

K
freebsdFreeBSDB0911985-6E2A-11D9-9557-000A95BC6FAE
HistoryDec 08, 2004 - 12:00 a.m.

web browsers -- window injection vulnerabilities

2004-12-0800:00:00
vuxml.freebsd.org
14

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%

A Secunia Research advisory reports:

Secunia Research has reported a vulnerability in multiple
browsers, which can be exploited by malicious people to
spoof the content of websites.
The problem is that a website can inject content into
another site’s window if the target name of the window is
known. This can e.g. be exploited by a malicious website
to spoof the content of a pop-up window opened on a
trusted website.
Secunia has constructed a test, which can be used to
check if your browser is affected by this issue:
http://secunia.com/multiple_browsers_window_injection_vulnerability_test/

A workaround
for Mozilla-based browsers is available.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%

Related for B0911985-6E2A-11D9-9557-000A95BC6FAE