CVE-2008-0593 in Firefoxinfo

Summary

Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

02/05/2008

Disclosure

02/08/2008

Entries

1: VDB-3589

CPE

ready

CVSS

8.8

EPSS

0.01092

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!