Bradley Chapman Tabbrowser Preferences (TBP) Mozilla Extension Information Disclosure Vulnerability

Bugtraq ID:	10896
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 09 2004 12:00AM
Updated:	Aug 09 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Brian Martin <[email protected]>.
Vulnerable:	Bradley Chapman Tabbrowser Preferences 0.6.7
Not Vulnerable:	Bradley Chapman Tabbrowser Preferences 0.6.8

Bradley Chapman Tabbrowser Preferences (TBP) Mozilla Extension Information Disclosure Vulnerability

Bradley Chapman Tabbrowser Preferences (TBP) is reported prone to an information disclosure vulnerability. The issue is reported to exist if certain TBP options are selected. When a URL is typed into the browser address bar, the new page is loaded in a new tab. The information disclosure occurs because the site in the new tab will receive a HTTP referrer URL of the site in the previous tab even though the domains are not related.

Bradley Chapman Tabbrowser Preferences (TBP) Mozilla Extension Information Disclosure Vulnerability

There is no exploit required.

Bradley Chapman Tabbrowser Preferences (TBP) Mozilla Extension Information Disclosure Vulnerability

Solution:
The vendor has released an upgrade to address this issue:


Bradley Chapman Tabbrowser Preferences 0.6.7

• Bradley Chapman Tabbrowser Preferences 0.6.8
  http://www.pryan.org/mozilla/site/TheOneKEA/tabprefs/#link

Bradley Chapman Tabbrowser Preferences (TBP) Mozilla Extension Information Disclosure Vulnerability

References:

• Bugzilla Bug 252410 -Wrong referrer with "Load URLs typed into the address bar i (Mozilla)
  
• Tabbrowser Preferences Homepage (Bradley Chapman)