Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Internet Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=25)
-   -   Firefox regains a bug (https://www.cableforum.uk/board/showthread.php?t=29909)

Paul K 07-06-2005 14:23
Firefox regains a bug
 
El Reg
Quote:
A seven year-old type of vulnerability has been inadvertently re-introduced in the latest versions of Mozilla and Firefox. The resurrected flaw could be used by hackers or potential fraudster to spoof the contents of websites, Danish security alert firm Secunia says.

The security bug - "moderately critical", Secunia says - stems from a failure to check if a target frame belongs to a particular, opened website. This allows one browser window to load content into a named frame of another window.

This frame injection vulnerability has been confirmed in Firefox 1.0.4 and Mozilla 1.7.8. Version 0.8.4 of the Camino browser for Mac OS X - but not version 0.8.3 - is also vulnerable. Other versions may also be affected. Secunia has constructed a test here. It advises surfers to avoid browsing untrusted sites while browsing trusted sites pending a fix from the Mozilla Foundation.

In July 2004, Secunia warned that a similar frame injection vulnerability affected certain flavours of IE and Opera as well as earlier versions of Mozilla. ®

Mal 07-06-2005 14:38
Re: Firefox regains a bug
 
Whoops :)
__________________

I just tried the test (I am using F.F 1.04) and nothing happened :shrug:

Aragorn 07-06-2005 15:03
Re: Firefox regains a bug
 
Didn't affect me on FF 1.04 either - using Tabbroser extensions.

Chris 07-06-2005 15:06
Re: Firefox regains a bug
 
Oops, silly coders ... but what's the betting the damage is undone in a matter of hours. :)

punky 07-06-2005 15:07
Re: Firefox regains a bug
 
Quote:
Originally Posted by Aragorn
Didn't affect me on FF 1.04 either - using Tabbroser extensions.
Me either, it just opens up as a new tab.

Seems like a fix could be easier than people think :)

Roy MM 07-06-2005 15:20
Re: Firefox regains a bug
 
Didn't work on me either FF 1-04

Paul K 07-06-2005 15:28
Re: Firefox regains a bug
 
Strangely enough it affected my browser :erm: I opened the MSDN link in a new window and clicked the secunia link and the main frame in the MSDN window was taken over by the secunia page. All other frames were MSDN apart from the mainframe.

Richard M 07-06-2005 16:25
Re: Firefox regains a bug
 
Vulnerable here (FF 1.0.4) but not on the nightly I run at home.

ikthius 07-06-2005 17:07
Re: Firefox regains a bug
 
same here, if you do it right it works, if you just use tabs, it does not.

ik

mart44 07-06-2005 17:36
Re: Firefox regains a bug
 
This clarifies why some are affected and others aren't. As suspected, it's all to do with tab extensions.

http://forums.mozillazine.org/viewtopic.php?t=276111

Richard M 07-06-2005 18:25
Re: Firefox regains a bug
 
Actually IE has this vuln too, and it's been unpatched for a year.
http://secunia.com/advisories/11966/


All times are GMT. The time now is 22:45.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum