[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome
I want to warn you about Cross-Site Scripting vulnerability in Mozilla,
Firefox and Chrome.
Some time ago Mozilla fixed vulnerability in Firefox described in MFSA
This vulnerability was fixed in Firefox 3.0.9. And recently, 06.07.2009, I
found possibility to bypass this protection in Firefox. Also this method of
XSS attacks works in Mozilla (1.7.x) and Chrome.
needed to use data: URI, which will be containing requisite JS code. This
method of conducting of XSS attacks via meta-refresh tag is already known -
it was in XSS Cheat Sheet (http://ha.ckers.org/xss.html) already in 2006
year. And I used it to bypass protection in Firefox and to conduct attacks
via refresh-header redirectors.
Meta-refresh tag and refresh header attack vectors:
With request to script at web site:
Which returns in answer the refresh header and the code will execute in the
Via data: it's possible to bypass in Firefox 3.0.9 and higher (I tested in
Firefox 3.0.11 and Google Chrome you can't get to cookies this way, but it's
possible in old Mozilla (and in those versions of Firefox where there is
relation between data: page and original page).
Vulnerable version is Mozilla 1.7.x and previous versions.
Vulnerable version is Mozilla Firefox 3.0.11 and previous versions (and 3.5
should be also vulnerable).
Vulnerable version is Google Chrome 22.214.171.124 and previous versions (and
potentially next versions too).
I mentioned about this vulnerability at my site
After I informed Mozilla, they declined to fix this vulnerability. Thus
malware spreading) on all refresh-header redirectors, which there are a lot
Best wishes & regards,
Administrator of Websecurity web site