Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to spoof the origin domain name of a script via a long name.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox | Mozilla | * | * |
| Xulrunner-1.9.1 | Ubuntu | devel | * |
| Xulrunner-1.9.1 | Ubuntu | jaunty | * |
| Xulrunner-1.9.1 | Ubuntu | karmic | * |
| Xulrunner-1.9.1 | Ubuntu | upstream | * |
References
- http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html
- http://securitytracker.com/id?1023287
- http://www.securityfocus.com/bid/37232
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54612
- http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html
- http://securitytracker.com/id?1023287
- http://www.securityfocus.com/bid/37232
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54612