Mozilla Browser URI MouseOver Obfuscation Weakness

Bugtraq ID:	9203
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 11 2003 12:00AM
Updated:	Dec 11 2003 12:00AM
Credit:	This weakness was reported by netmask <[email protected]>.
Vulnerable:	Mozilla Browser 1.5
Not Vulnerable:

Mozilla Browser URI MouseOver Obfuscation Weakness

It has been discovered that the Mozilla browser is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatted in such a way that a NULL byte is located after the user value. It is said that, when doing a mouseover of such a URI, it will cause it to only display the contents of the user value, not the entire link.

This could be used in conjunction with other URI obfuscation attacks and browser vulnerabilities to trick a user into following a malicious link.

Mozilla Browser URI MouseOver Obfuscation Weakness

The following proof of concept was supplied:

http://www.trusted.com%[email protected]

Mozilla Browser URI MouseOver Obfuscation Weakness

References:

• Mozilla Homepage (Mozilla Foundation)
  
• Re: Internet Explorer URL parsing vulnerability (Yes, Mozilla too.) (netmask )