HTTP: About Local Link Exploit (JS)

This signature detects attempts to exploit a known vulnerability in Web browsers that support the "about:" URI scheme within a script. Attackers can use this technique in combination with other browser exploits to elevate an attack into a trusted security zone (such as Local Computer).

Extended Description

Mozilla Browser/Firefox are prone to a potential arbitrary code-execution weakness. Specifically, an attacker can load privileged 'chrome' pages from an unprivileged 'about:' page. This issue does not pose a threat unless it is combined with a same-origin violation issue. If successfully exploited, this issue may allow a remote attacker to execute arbitrary code and gain unauthorized remote access to a computer. This would occur in the context of the user running the browser.

Affected Products

Mozilla thunderbird

References

BugTraq: 14920

CVE: CVE-2005-2706

URL: http://www.mozilla.org/security/announce/mfsa2005-58.html#about

Short Name

HTTP:STC:ABOUT-JAVASCRIPT

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: About Local Link Exploit (JS)

Extended Description

Affected Products

References

Found a potential security threat?