Attachment 41647 Details for Bug 88509

mfsa2005-52

mfsa2005-52.html (text/html), 1.48 KB, created by Wolfgang Rosenauer on 2005-07-12 10:34:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Wolfgang Rosenauer

Created: 2005-07-12 10:34:30 UTC

Size: 1.48 KB

patch

obsolete

><html>
>  <head>
>    <title>MFSA 2005-52: Same origin violation: frame calling top.focus()</title>
>    <style>
>       .label { width: 8em; font-weight: bold; float: left;}
>    </style>
>  </head>
><body>
><h1>Mozilla Foundation Security Advisory 2005-52</h1>
>
><span class="label">Title:</span>      Same origin violation: frame calling top.focus()<br>
><span class="label">Severity:</span>   High<br>
><span class="label">Reporter:</span>   Secunia.com<br>
><span class="label">Products:</span>   Firefox, Mozilla Suite<br>
><br>
><span class="label">Fixed in:</span>   Firefox 1.0.5<br>
><span class="label">&nbsp;</span>      Mozilla Suite 1.7.9<br>
>
><h3>Description</h3>
>
>A child frame can call top.focus() even if the framing page comes from a different
>origin and has overridden the focus() routine. The call is made in the context
>of the child frame. The attacker would look for a target site with a framed
>page that makes this call but doesn't verify that its parent comes from the same
>site. By framing this page the attacker could steal cookies and passwords, or
>take actions on the site on behalf of a signed-in user.
>
>
><h3>Workaround</h3>
>
>Disable Javascript. As a website author verify that a parent frame is
>from the expected site before calling methods on it.
>
>
><h3>References</h3>
>
><a href="http://secunia.com/advisories/15549/">http://secunia.com/advisories/15549/</a><br>
>
><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=296830">
>https://bugzilla.mozilla.org/show_bug.cgi?id=296830</a><br>
>
></body>
></html>

<html>
  <head>
    <title>MFSA 2005-52: Same origin violation: frame calling top.focus()</title>
    <style>
       .label { width: 8em; font-weight: bold; float: left;}
    </style>
  </head>
<body>
<h1>Mozilla Foundation Security Advisory 2005-52</h1>

<span class="label">Title:</span>      Same origin violation: frame calling top.focus()<br>
<span class="label">Severity:</span>   High<br>
<span class="label">Reporter:</span>   Secunia.com<br>
<span class="label">Products:</span>   Firefox, Mozilla Suite<br>
<br>
<span class="label">Fixed in:</span>   Firefox 1.0.5<br>
<span class="label">&nbsp;</span>      Mozilla Suite 1.7.9<br>

<h3>Description</h3>

A child frame can call top.focus() even if the framing page comes from a different
origin and has overridden the focus() routine. The call is made in the context
of the child frame. The attacker would look for a target site with a framed
page that makes this call but doesn't verify that its parent comes from the same
site. By framing this page the attacker could steal cookies and passwords, or
take actions on the site on behalf of a signed-in user.


<h3>Workaround</h3>

Disable Javascript. As a website author verify that a parent frame is
from the expected site before calling methods on it.


<h3>References</h3>

<a href="http://secunia.com/advisories/15549/">http://secunia.com/advisories/15549/</a><br>

<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=296830">
https://bugzilla.mozilla.org/show_bug.cgi?id=296830</a><br>

</body>
</html>

Actions: View

Attachments on bug 88509: 41640 | 41641 | 41642 | 41643 | 41644 | 41645 | 41646 | 41647 | 41648 | 41649 | 41650 | 41651