Attachment 41648 Details for Bug 88509

mfsa2005-53

mfsa2005-53.html (text/html), 2.07 KB, created by Wolfgang Rosenauer on 2005-07-12 10:34:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Wolfgang Rosenauer

Created: 2005-07-12 10:34:44 UTC

Size: 2.07 KB

patch

obsolete

><html>
>  <head>
>    <title>MFSA 2005-53: Standalone applications can run arbitrary code through the browser</title>
>    <style>
>       .label { width: 8em; font-weight: bold; float: left;}
>    </style>
>  </head>
><body>
><h1>Mozilla Foundation Security Advisory 2005-53</h1>
>
><span class="label">Title:</span>      Standalone applications can run arbitrary code through the browser<br>
><span class="label">Severity:</span>   Critical<br>
><span class="label">Reporter:</span>   Michael Krax<br>
><span class="label">Products:</span>   Firefox, Mozilla Suite<br>
><br>
><span class="label">Fixed in:</span>   Firefox 1.0.5<br>
><span class="label">&nbsp;</span>      Mozilla Suite 1.7.9<br>
>
><h3>Description</h3>
>
>Several media players, for example Flash and QuickTime, support scripted content
>with the ability to open URLs in the default browser. The default behavior for
>Firefox and the Mozilla Suite was to replace the currently open browser window's
>content with the externally opened content. If the external URL was a javascript:
>url it would run as if it came from the site that served the previous content, which
>could be used to steal sensitive information such as login cookies or passwords.
>If the media player content first caused a privileged chrome: url to load then
>the subsequent javascript: url could execute arbitrary code.
><p>
>External javascript: urls will now run in a blank context regardless of what
>content it's replacing, and external apps will no longer be able to load
>privileged chrome: urls in a browser window. The -chrome command line option
>to load chrome applications is still supported.
>
>
><h3>Workaround</h3>
>
>Set the browser to open external links in a new tab or new window.
><ol>
><li>Open the Options dialog from the Tools menu
><li>Select the Advanced icon in the left panel
><li>Open the "Tabbed Browsing" group
><li>Set "Open links from other applications in:" to either new tab or new window
></ol>
>
>Or disable JavaScript.
>
>
><h3>References</h3>
>
><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=298255">
>https://bugzilla.mozilla.org/show_bug.cgi?id=298255</a><br>
>
></body>
></html>

<html>
  <head>
    <title>MFSA 2005-53: Standalone applications can run arbitrary code through the browser</title>
    <style>
       .label { width: 8em; font-weight: bold; float: left;}
    </style>
  </head>
<body>
<h1>Mozilla Foundation Security Advisory 2005-53</h1>

<span class="label">Title:</span>      Standalone applications can run arbitrary code through the browser<br>
<span class="label">Severity:</span>   Critical<br>
<span class="label">Reporter:</span>   Michael Krax<br>
<span class="label">Products:</span>   Firefox, Mozilla Suite<br>
<br>
<span class="label">Fixed in:</span>   Firefox 1.0.5<br>
<span class="label">&nbsp;</span>      Mozilla Suite 1.7.9<br>

<h3>Description</h3>

Several media players, for example Flash and QuickTime, support scripted content
with the ability to open URLs in the default browser. The default behavior for
Firefox and the Mozilla Suite was to replace the currently open browser window's
content with the externally opened content. If the external URL was a javascript:
url it would run as if it came from the site that served the previous content, which
could be used to steal sensitive information such as login cookies or passwords.
If the media player content first caused a privileged chrome: url to load then
the subsequent javascript: url could execute arbitrary code.
<p>
External javascript: urls will now run in a blank context regardless of what
content it's replacing, and external apps will no longer be able to load
privileged chrome: urls in a browser window. The -chrome command line option
to load chrome applications is still supported.


<h3>Workaround</h3>

Set the browser to open external links in a new tab or new window.
<ol>
<li>Open the Options dialog from the Tools menu
<li>Select the Advanced icon in the left panel
<li>Open the "Tabbed Browsing" group
<li>Set "Open links from other applications in:" to either new tab or new window
</ol>

Or disable JavaScript.


<h3>References</h3>

<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=298255">
https://bugzilla.mozilla.org/show_bug.cgi?id=298255</a><br>

</body>
</html>

Actions: View

Attachments on bug 88509: 41640 | 41641 | 41642 | 41643 | 41644 | 41645 | 41646 | 41647 | 41648 | 41649 | 41650 | 41651