HTTP: Firefox Wrapped Javascript

This signature detects attempts to exploit a known vulnerability in Firefox Web browser. Attackers can create a malicious Web page that contains wrapped JavaScript; when viewed in the browser, the JavaScript can execute arbitrary code within the context of the Web browser.

Extended Description

Multiple issues in Mozilla Suite and Firefox allow attackers to bypass security checks in the script security manager. Security checks in the script security manager are designed to prevent script-injection vulnerabilities. An attacker sending certain undisclosed JavaScript in 'view-source:' and 'jar:' pseudo-protocol URIs may bypass these security checks. An undisclosed nested URI, as well as a variant of BID 13216, can reportedly also bypass security checks. Exploiting these vulnerabilities allows remote attackers to run script code with elevated privileges, leading to the installation and execution of malicious applications on an affected computer. Cross-site scripting and other attacks are also likely possible. The vendor has not provided enough information to determine how many specific instances of the issue were addressed, and has not clarified whether or not they have addressed a single general vulnerability or multiple specific vulnerabilities. This BID may be split into separate issues as more information is disclosed. Further details are scheduled to be released in the future. This BID will be updated at that time.

Affected Products

Mozilla browser

References

BugTraq: 13641

CVE: CVE-2005-1531

URL: http://www.mozilla.org/security/announce/mfsa2005-43.html http://www.frsirt.com/english/advisories/2005/0530 http://securitytracker.com/id?1013962

Short Name

HTTP:STC:MOZILLA:WRAPPED-JAVA

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Firefox Wrapped Javascript

Extended Description

Affected Products

References

Found a potential security threat?