Mozilla Firefox XMLHttpRequest and XPCNativeWrapper.toString Bugs Let Remote Users Bypass Same-Origin Restrictions
|
|
SecurityTracker Alert ID: 1022094 |
|
SecurityTracker URL: http://securitytracker.com/id/1022094
|
|
CVE Reference:
CVE-2009-1309
(Links to External Site)
|
Date: Apr 22 2009
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 3.x prior to 3.0.9
|
Description:
A vulnerability was reported in Mozilla Firefox. A remote user can execute arbitrary JavaScript in the context of another domain.
A remote user can create specially crafted HTML that makes an XMLHttpRequest to trigger a mismatch between the document's URI and the document's principal. As a result, arbitrary JavaScript can be executed in the context of another domain.
The XPCNativeWrapper.toString function may be executed in the wrong context, allowing arbitrary code to be executed within the context of another domain (including chrome).
Mozilla SeaMonkey is affected.
Mozilla Thunderbird may be affected if JavaScript is enabled (not the default configuration).
moz_bug_r_a4 reported this vulnerability.
|
Impact:
A remote user can execute arbitrary JavaScript in the context of another domain.
|
Solution:
The vendor has issued a fix (3.0.9).
The vendor's advisory is available at:
http://www.mozilla.org/security/announce/2009/mfsa2009-19.html
|
Vendor URL: www.mozilla.org/security/announce/2009/mfsa2009-19.html (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Tue, 21 Apr 2009 23:05:55 -0400
Subject: Mozilla Firefox
|
http://www.mozilla.org/security/announce/2009/mfsa2009-19.html
CVE-2009-1309
|
|
