Mozilla / Firefox user interface spoofing vulnerability

The Mozilla project's family of browsers contain a design flaw that can allow a website to spoof almost perfectly any part of the Mozilla user interface, including spoofing web sites for phishing or internal elements such as the "Master Password" dialog box. This achieved by manipulating "chrome"...

Mozilla Browser 0.91.x Cache File - Multiple Vulnerabilities

Mozilla Browser 0.91.x Cache File - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10709/info Mozilla Browser is reported prone to multiple vulnerabilities that could eventually allow for code execution on the local computer. These vulnerabilities do not represent a significan...

Mozilla Browser 0.9/1.x Cache File - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/10709/info Mozilla Browser is reported prone to multiple vulnerabilities that could eventually allow for code execution on the local computer. These vulnerabilities do not represent a significant threat on their own, however, code execution in the context...

Mozilla Browsers shell: URI Arbitrary Command Execution

The remote host is using Mozilla and/or Firefox, a web browser. The remote version of this software contains a weakness that could allow an attacker to execute arbitrary commands on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12642;...

Mozilla 1.7 - External Protocol Handler

Mozilla 1.7 - External Protocol Handler source: https://www.securityfocus.com/bid/10681/info Mozilla Internet Browser is reported prone to a weakness that may permit an external protocol to be called without any user interaction. This may expose Mozilla users to vulnerabilities that exist in the...

Mozilla 1.7 - External Protocol Handler

source: https://www.securityfocus.com/bid/10681/info Mozilla Internet Browser is reported prone to a weakness that may permit an external protocol to be called without any user interaction. This may expose Mozilla users to vulnerabilities that exist in the underlying operating system or in the...

[Full-Disclosure] Race conditions in security dialogs

I discovered arbitrary code execution holes in Mozilla, Internet Explorer, and Opera that involve human reaction time. One version of the attack works like this: the page contains a captcha displaying the word "only" and asks you to type the word to verify that you are a human. As soon as you typ...

Mozilla Browser 1.61.7 - URI Obfuscation

Mozilla Browser 1.61.7 - URI Obfuscation source: https://www.securityfocus.com/bid/10532/info A weakness is reported in Mozilla that may allow an attacker to obfuscate the URI of a link. This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from...

Mozilla Browser 1.6/1.7 - URI Obfuscation

source: https://www.securityfocus.com/bid/10532/info A weakness is reported in Mozilla that may allow an attacker to obfuscate the URI of a link. This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users. It is reported that th...

Sandblad #13: Cross-domain exploit on zombie document with event handlers

PUBLIC SECURITY ADVISORY: Sandblad 13 -------------------------------------------------------------- Title: Cross-domain exploit on zombie document with event handlers Date: 2004-02-25 Software: Mozilla web browser Vendor: http://www.mozilla.org/ Status: Patched Reference:...

Mozilla Browser 1.5 - URI MouseOver Obfuscation

Mozilla Browser 1.5 - URI MouseOver Obfuscation source: https://www.securityfocus.com/bid/9203/info It has been discovered that the Mozilla browser is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatted in such a...

Mozilla Browser 1.5 - URI MouseOver Obfuscation

source: https://www.securityfocus.com/bid/9203/info It has been discovered that the Mozilla browser is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatted in such a way that a NULL byte is located after the user...

i cracked restriction of 'zone' in mozilla.

i cracked restriction of 'zone' in mozilla. "that's all" is the end of file if you are in a hurry tested OS:"Windows Server 2003" NETSCAPE Ver String: "Mozilla/5.0 Windows; U; Windows NT 5.2; zh-CN; rv:1.0.1 Gecko/20020823 Netscape/7.0 " downloaded on "2003/3/31 UTC+800" MOZILLA Ver String:...

Mozilla 0.9.x1.0 - JavaScript URL Host Spoofing Arbitrary Cookie Access

Mozilla 0.9.x1.0 - JavaScript URL Host Spoofing Arbitrary Cookie Access source: https://www.securityfocus.com/bid/5293/info Mozilla is an open source web browser available for a number of platforms, including Microsoft Windows and Linux. An issue has been reported in the Mozilla web browser which...

Mozilla 0.9.x/1.0 - JavaScript URL Host Spoofing Arbitrary Cookie Access

source: https://www.securityfocus.com/bid/5293/info Mozilla is an open source web browser available for a number of platforms, including Microsoft Windows and Linux. An issue has been reported in the Mozilla web browser which may allow script code to access cookie data associated with arbitrary...

CVE-2002-0354

The XMLHttpRequest object XMLHTTP in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property...

Netscape 4.x6.x Mozilla 0.9.x - Malformed Email POP3 Denial of Service

Netscape 4.x6.x Mozilla 0.9.x - Malformed Email POP3 Denial of Service // source: https://www.securityfocus.com/bid/5002/info The Netscape Communicator and Mozilla browsers include support for email, and the ability to fetch mail through a POP3 server. Both products are available for a range of...