HTTP: Firefox IconURL JavaScript Injection

This signature detects attempts to exploit a known vulnerability in Firefox Web browser. Attackers can create a malicious Web page that, when viewed in a browser, executes arbitrary Javascript code within the context of Chrome.

Extended Description

Mozilla Firefox is prone to a security vulnerability that could result in the execution of arbitrary code without requiring user interaction. Initial analysis of the vulnerability reveals that the it relies on a three-stage attack that may lead to an arbitrary script gaining 'UniversalXPConnect' privileges. A remote atacker may be able to exploit this issue to take arbitrary actions on the vulnerable computer in the context of the user that is running the affcted browser. This vulnerability is reported in all versions of Mozilla Firefox browsers up to 1.0.3. To be exploitable, a site listed in a victim user's configuration to allow extension installation must be prone to a cross-site scripting vulnerability. By default, 'update.mozilla.org' and 'addon.mozilla.org' are both listed as trusted sites for extension installation. *Update: The cross-site scripting vulnerability that the publicly available exploit relied on in the mozilla.org domain has been fixed. This issue is no longer exploitable through this public attack vector.

Affected Products

Mozilla browser

References

BugTraq: 13544

CVE: CVE-2005-1477

URL: http://www.mandriva.com/security/advisories?name=MDKSA-2005:088 http://www.kb.cert.org/vuls/id/534710 http://www.mozilla.org/security/announce/mfsa2005-42.html

Short Name

HTTP:STC:MOZILLA:ICONURL-JS

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Firefox IconURL JavaScript Injection

Extended Description

Affected Products

References

Found a potential security threat?