PT-2005-3195 · Mozilla+1 · Firefox+2
John Dalbec
·
Publicado
2005-07-13
·
Atualizado
2017-10-11
·
CVE-2005-2266
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Firefox versions prior to 1.0.5
Mozilla versions prior to 1.7.9
Description:
The issue allows a child frame to call methods such as
top.focus() in a parent frame, even when the parent is in a different domain, violating the same origin policy. This enables remote attackers to steal sensitive information, including cookies and passwords, from websites whose child frames do not verify that they are in the same domain as their parents.Recommendations:
For Firefox versions prior to 1.0.5, update to version 1.0.5 or later.
For Mozilla versions prior to 1.7.9, update to version 1.7.9 or later.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Mozilla Firefox
Red Hat