Lucene search

K
securityvulnsBUGTRAQSECURITYVULNS:VULN:7304
HistoryMar 06, 2009 - 12:00 a.m.

Multiple browsers inherited charset crossite scripting

2009-03-0600:00:00
BUGTRAQ
vulners.com
21

If [age with undefined charset is displayed in frame, codepage of parent page is used. It makes it possible to conduct crossite scripting attack with e.g. UTF-7, EUC-JP (SHIFT_JIS) charset.

CPENameOperatorVersion
firefoxeq1.5
firefoxeq3.0
chromeeq1.0
firefoxeq2.0