Information disclosure

Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify the context of Windows .url shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive...

CVE-2008-4582

Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify the context of Windows .url shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive...

CVE-2008-4582

CVE-2008-4582 describes an information leak through local Windows shortcut files (.url) that could bypass Same Origin Policy and disclose data via an HTML document. Publicly documented details indicate affected products include Mozilla Firefox 3.0.1–3.0.3, Firefox 2.x prior to 2.0.0.18, and SeaMo...

CVE-2008-4582

Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify the context of Windows .url shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive...

Mozilla Firefox Internet快捷方式同源策略冲突漏洞

BUGTRAQ ID: 31611 CNCAN ID：CNCAN-2008100802 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox处理Internet快捷文件时存在同源策略冲突问题，远程攻击者可以利用漏洞获得其他域中的敏感信息或进行其他攻击。 通过HTML元素运行的.URL快捷方式时Firefox的location是错误的，利用这个错误可导致任意位置的内容可被读取-缓存信息，COOKIE信息，WEB, 本地文件系统等。 Mozilla Firefox 3.0.3 Mozilla Firefox 3.0.2 Mozilla Firefox...

Mozilla Firefox 3.0.3 - Internet Shortcut Same Origin Policy Violation

Mozilla Firefox 3.0.3 - Internet Shortcut Same Origin Policy Violation source: https://www.securityfocus.com/bid/31611/info Mozilla Firefox is prone to a vulnerability that allows attackers to violate the same-origin policy. This issue occurs because the application fails to properly enforce the...

Mozilla Firefox 3.0.3 - Internet Shortcut Same Origin Policy Violation

source: https://www.securityfocus.com/bid/31611/info Mozilla Firefox is prone to a vulnerability that allows attackers to violate the same-origin policy. This issue occurs because the application fails to properly enforce the same-origin policy when handling internet shortcut files. An attacker m...

Design/Logic Flaw

Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to...

CVE-2008-4197

Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to...

Opera Web浏览器9.52版本修复多个安全漏洞

BUGTRAQ ID: 30768 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.52之前版本中存在多个安全漏洞，可能允许恶意用户执行欺骗和跨站脚本、泄露敏感信息或完全入侵用户系统。 1 当Opera作为协议处理器执行时存在错误，可能导致崩溃或执行任意代码。这个漏洞仅影响Windows平台上的Opera。 2 网页可以更改弹出窗口中打开的其他站点帧的地址，这可能导致向可信任站点帧中加载恶意内容。 3 处理自定义快捷方式和菜单命令时存在错误，允许以危险的参数执行应用程序。成功利用这个漏洞要求能够诱骗用户修改快捷方式或菜单文件。 4...

GLSA-200808-03 : Mozilla products: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200808-03 Mozilla products: Multiple vulnerabilities The following vulnerabilities were reported in all mentioned Mozilla products: TippingPoint's Zero Day Initiative reported that an incorrect integer data type is used as a CSS...

Firefox arbitrary file disclosure

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut...

CVE-2008-2810

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut...

CVE-2008-2810

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut...

Design/Logic Flaw

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut...

CVE-2008-2810

CVE-2008-2810 affects Mozilla Firefox prior to 2.0.0.15 and SeaMonkey prior to 1.1.10. Root cause: improper identification of the context of Windows shortcut files, enabling a user-assisted remote attacker to bypass the Same Origin Policy via a crafted site for which the user has saved a shortcut...

CVE-2008-2810

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut...

Mozilla Foundation Security Advisory 2008-32

Mozilla Foundation Security Advisory 2008-32 Title: Remote site run as local file via Windows URL shortcut Impact: Moderate Announced: July 1, 2008 Reporter: Geoff "misterffoeg" Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.15 SeaMonkey 1.1.10 Description Mozilla community member Geoff...

Firefox arbitrary file disclosure

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut...

Firefox < 2.0.0.15 Multiple Vulnerabilities

The installed version of Firefox is affected by various security issues : - Several stability bugs leading to crashes which, in some cases, show traces of memory corruption MFSA 2008-21. - A vulnerability involving violation of the same-origin policy could allow for cross-site scripting attacks...