Mozilla Firefox Location Bar Can Be Spoofed Using Specially Crafted Control Characters
|
|
SecurityTracker Alert ID: 1021799 |
|
SecurityTracker URL: http://securitytracker.com/id/1021799
|
|
CVE Reference:
CVE-2009-0777
(Links to External Site)
|
Date: Mar 5 2009
|
Impact:
Modification of system information
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): prior to 3.0.7
|
Description:
A vulnerability was reported in Mozilla Firefox. A remote user can spoof the location bar URL.
A remote user can create a specially crafted URL containing certain invisible control characters that, when loaded by the target user, will spoof the URL in the location bar.
Mozilla SeaMonkey is affected.
Masahiro Yamada reported this vulnerability.
|
Impact:
A remote user can spoof the location bar URL.
|
Solution:
The vendor has issued a fix (3.0.7).
The vendor's advisory is available at:
http://www.mozilla.org/security/announce/2009/mfsa2009-11.html
|
Vendor URL: www.mozilla.org/security/announce/2009/mfsa2009-11.html (Links to External Site)
|
Cause:
Input validation error
|
Underlying OS:
Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 4 Mar 2009 20:58:59 -0500
Subject: http://www.mozilla.org/security/announce/2009/mfsa2009-11.html
|
CVE-2009-0777
|
|
