Mozilla Firefox about:newtab权限提升漏洞

Bugtraq ID:55249 CVE ID: CVE-2012-3965 Mozilla Firefox/是Mozilla所发布的WEB浏览器。 Mozilla Firefox把Chrome特权about:newtab保持在历史链中，允许攻击者装载about:newtab提升权限，在系统上执行任意代码。 0 Firefox 15 厂商解决方案 Firefox 15已经修复此漏洞，建议用户下载使用： http://www.mozilla.org...

CVE-2012-3965: Undefined Security Weakness

Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window...