Attachment 41651 Details for Bug 88509

mfsa2005-56

mfsa2005-56.html (text/html), 1.41 KB, created by Wolfgang Rosenauer on 2005-07-12 10:35:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Wolfgang Rosenauer

Created: 2005-07-12 10:35:25 UTC

Size: 1.41 KB

patch

obsolete

><html>
>  <head>
>    <title>MFSA 2005-56: Code execution through shared function objects</title>
>    <style>
>       .label { width: 8em; font-weight: bold; float: left;}
>    </style>
>  </head>
><body>
><h1>Mozilla Foundation Security Advisory 2005-56</h1>
>
><span class="label">Title:</span>      Code execution through shared function objects<br>
><span class="label">Severity:</span>   Critical<br>
><span class="label">Reporter:</span>   moz_bug_r_a4, shutdown<br>
><span class="label">Products:</span>   Firefox, Mozilla Suite<br>
><br>
><span class="label">Fixed in:</span>   Firefox 1.0.5<br>
><span class="label">&nbsp;</span>      Mozilla Suite 1.7.9<br>
>
><h3>Description</h3>
>
>Improper cloning of base objects allowed web content scripts to
>get to a privileged object by walking up the prototype chain.
>This could be used to execute code with enhanced privileges.
>
>
><h3>Workaround</h3>
>
>Disable JavaScript
>
><h3>References</h3>
>
><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=294795">
>https://bugzilla.mozilla.org/show_bug.cgi?id=294795</a><br>
>
><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=294799">
>https://bugzilla.mozilla.org/show_bug.cgi?id=294799</a><br>
>
><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=295011">
>https://bugzilla.mozilla.org/show_bug.cgi?id=295011</a><br>
>
><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=296397">
>https://bugzilla.mozilla.org/show_bug.cgi?id=296397</a><br>
>
></body>
></html>

<html>
  <head>
    <title>MFSA 2005-56: Code execution through shared function objects</title>
    <style>
       .label { width: 8em; font-weight: bold; float: left;}
    </style>
  </head>
<body>
<h1>Mozilla Foundation Security Advisory 2005-56</h1>

<span class="label">Title:</span>      Code execution through shared function objects<br>
<span class="label">Severity:</span>   Critical<br>
<span class="label">Reporter:</span>   moz_bug_r_a4, shutdown<br>
<span class="label">Products:</span>   Firefox, Mozilla Suite<br>
<br>
<span class="label">Fixed in:</span>   Firefox 1.0.5<br>
<span class="label">&nbsp;</span>      Mozilla Suite 1.7.9<br>

<h3>Description</h3>

Improper cloning of base objects allowed web content scripts to
get to a privileged object by walking up the prototype chain.
This could be used to execute code with enhanced privileges.


<h3>Workaround</h3>

Disable JavaScript

<h3>References</h3>

<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=294795">
https://bugzilla.mozilla.org/show_bug.cgi?id=294795</a><br>

<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=294799">
https://bugzilla.mozilla.org/show_bug.cgi?id=294799</a><br>

<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=295011">
https://bugzilla.mozilla.org/show_bug.cgi?id=295011</a><br>

<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=296397">
https://bugzilla.mozilla.org/show_bug.cgi?id=296397</a><br>

</body>
</html>

Actions: View

Attachments on bug 88509: 41640 | 41641 | 41642 | 41643 | 41644 | 41645 | 41646 | 41647 | 41648 | 41649 | 41650 | 41651