Mozilla Firefox Style Sheet Redirection Information Disclosure Vulnerability

Bugtraq ID:	38369
Class:	Design Error
CVE:	CVE-2010-0655
Remote:	Yes
Local:	No
Published:	Jan 09 2010 12:00AM
Updated:	Jan 09 2010 12:00AM
Credit:	Cesar Cerrudo
Vulnerable:	Mozilla Firefox 3.5.8 Mozilla Firefox 3.5.7 Mozilla Firefox 3.5.6 Mozilla Firefox 3.5.5 Mozilla Firefox 3.5.4 Mozilla Firefox 3.5.3 Mozilla Firefox 3.5.2 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 3.0.18 Mozilla Firefox 3.0.17 Mozilla Firefox 3.0.16 Mozilla Firefox 3.0.15 Mozilla Firefox 3.0.14 Mozilla Firefox 3.0.13 Mozilla Firefox 3.0.12 Mozilla Firefox 3.0.11 Mozilla Firefox 3.0.10 Mozilla Firefox 3.0.9 Mozilla Firefox 3.0.8 Mozilla Firefox 3.0.7 Beta Mozilla Firefox 3.0.7 Mozilla Firefox 3.0.6 Mozilla Firefox 3.0.5 Mozilla Firefox 3.0.4 Mozilla Firefox 3.0.3 Mozilla Firefox 3.0.2 Mozilla Firefox 3.0.1 Mozilla Firefox 3.1 Beta 3 Mozilla Firefox 3.1 Beta 2 Mozilla Firefox 3.1 Beta 1 Mozilla Firefox 3.0 Beta 5 Mozilla Firefox 3.0
Not Vulnerable:

Mozilla Firefox Style Sheet Redirection Information Disclosure Vulnerability

Mozilla Firefox is prone to a remote information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information that may lead to further attacks.

Mozilla Firefox Style Sheet Redirection Information Disclosure Vulnerability

The following example is available:

• /data/vulnerabilities/exploits/styleredirect.html

Mozilla Firefox Style Sheet Redirection Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mozilla Firefox Style Sheet Redirection Information Disclosure Vulnerability

References:

• Little bug in Safari and Google Chrome (Cesar Cerrudo)
  
• Mozilla Homepage (Mozilla Foundation)