Mozilla Firebird Browser markLinkVisited Arbitrary Script Code Execution Vulnerability
BID:9329
Info
Mozilla Firebird Browser markLinkVisited Arbitrary Script Code Execution Vulnerability
| Bugtraq ID: | 9329 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 24 2003 12:00AM |
| Updated: | Aug 24 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to the vendor. |
| Vulnerable: |
Mozilla Firebird 0.6.1 Mozilla Firebird 0.5 Mozilla Browser 1.4 b Mozilla Browser 1.4 a Mozilla Browser 1.4 Mozilla Browser 1.3.1 Mozilla Browser 1.3 Mozilla Browser 1.2.1 Mozilla Browser 1.2 Beta Mozilla Browser 1.2 Alpha Mozilla Browser 1.2 Mozilla Browser 1.1 Beta Mozilla Browser 1.1 Alpha Mozilla Browser 1.1 Mozilla Browser 1.0.2 Mozilla Browser 1.0.1 Mozilla Browser 1.0 RC2 Mozilla Browser 1.0 RC1 Mozilla Browser 1.0 Mozilla Browser 0.9.48 Mozilla Browser 0.9.35 Mozilla Browser 0.9.9 Mozilla Browser 0.9.8 Mozilla Browser 0.9.7 Mozilla Browser 0.9.6 Mozilla Browser 0.9.5 Mozilla Browser 0.9.4 .1 Mozilla Browser 0.9.4 Mozilla Browser 0.9.3 Mozilla Browser 0.9.2 .1 Mozilla Browser 0.9.2 Mozilla Browser 0.8 Mozilla Browser M16 Mozilla Browser M15 |
| Not Vulnerable: |
Mozilla Firebird 0.7 Mozilla Browser 1.5 |
Discussion
Mozilla Firebird Browser markLinkVisited Arbitrary Script Code Execution Vulnerability
It has been reported that Mozilla Firebird Browser is prone to a vulnerability that may allow an attacker to execute arbitrary script code on a vulnerable system. The issue is reported to exist in the markLinkVisited function. It has been reported that an attacker may exploit this issue by setting the href setter of the linknode property to 'eval' in a link and sending this link to a vulnerable user. If the victim follows the malicious link the attacker may be able to gain chrome privileges on a vulnerable system and execute arbitrary script code.
Successful exploitation of this issue may allow an attacker gain chrome privileges and execute arbitrary script code on a vulnerable system in the context of the user.
It has been reported that Mozilla Firebird Browser is prone to a vulnerability that may allow an attacker to execute arbitrary script code on a vulnerable system. The issue is reported to exist in the markLinkVisited function. It has been reported that an attacker may exploit this issue by setting the href setter of the linknode property to 'eval' in a link and sending this link to a vulnerable user. If the victim follows the malicious link the attacker may be able to gain chrome privileges on a vulnerable system and execute arbitrary script code.
Successful exploitation of this issue may allow an attacker gain chrome privileges and execute arbitrary script code on a vulnerable system in the context of the user.
Exploit / POC
Mozilla Firebird Browser markLinkVisited Arbitrary Script Code Execution Vulnerability
A proof of concept demo has been provided:
http://bugzilla.mozilla.org/attachment.cgi?id=130347&action=view
A proof of concept demo has been provided:
http://bugzilla.mozilla.org/attachment.cgi?id=130347&action=view
Solution / Fix
Mozilla Firebird Browser markLinkVisited Arbitrary Script Code Execution Vulnerability
Solution:
The vendor has released Mozilla 1.5 and Firebird 0.7 to address this and other issues.
Mozilla Firebird 0.5
Mozilla Firebird 0.6.1
Mozilla Browser 0.8
Mozilla Browser 0.9.2 .1
Mozilla Browser 0.9.2
Mozilla Browser 0.9.3
Mozilla Browser 0.9.35
Mozilla Browser 0.9.4
Mozilla Browser 0.9.4 .1
Mozilla Browser 0.9.48
Mozilla Browser 0.9.5
Mozilla Browser 0.9.6
Mozilla Browser 0.9.7
Mozilla Browser 0.9.8
Mozilla Browser 0.9.9
Mozilla Browser 1.0 RC1
Mozilla Browser 1.0 RC2
Mozilla Browser 1.0
Mozilla Browser 1.0.1
Mozilla Browser 1.0.2
Mozilla Browser 1.1
Mozilla Browser 1.1 Alpha
Mozilla Browser 1.1 Beta
Mozilla Browser 1.2 Alpha
Mozilla Browser 1.2
Mozilla Browser 1.2 Beta
Mozilla Browser 1.2.1
Mozilla Browser 1.3
Mozilla Browser 1.3.1
Mozilla Browser 1.4 b
Mozilla Browser 1.4
Mozilla Browser 1.4 a
Solution:
The vendor has released Mozilla 1.5 and Firebird 0.7 to address this and other issues.
Mozilla Firebird 0.5
-
Mozilla Firebird 0.7
http://www.mozilla.org/products/firebird/
Mozilla Firebird 0.6.1
-
Mozilla Firebird 0.7
http://www.mozilla.org/products/firebird/
Mozilla Browser 0.8
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.2 .1
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.2
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.3
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.35
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.4
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.4 .1
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.48
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.5
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.6
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.7
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.8
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 0.9.9
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.0 RC1
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.0 RC2
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.0
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.0.1
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.0.2
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.1
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.1 Alpha
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.1 Beta
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.2 Alpha
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.2
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.2 Beta
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.2.1
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.3
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.3.1
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.4 b
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.4
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
Mozilla Browser 1.4 a
-
Mozilla Mozilla 1.5
http://www.mozilla.org/download.html
References
Mozilla Firebird Browser markLinkVisited Arbitrary Script Code Execution Vulnerability
References:
References:
- Known Vulnerabilities in Mozilla (Mozilla)
- Mozilla Homepage (Mozilla Foundation)