Mozilla Firefox 3.6 – Image Preloading Content-Policy Check Security Bypass

Exploit Database
126 阅读

作者： Josh Soref

日期： 2010-03-18
类别：
- remote
平台：
- linux
来源：https://www.exploit-db.com/exploits/33798/

source: https://www.securityfocus.com/bid/38927/info

Mozilla Firefox is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass content-loading policies.

Attackers can exploit this issue to bypass content-loading policies. The impact of this issue will depend on the reasons behind the content check. Consequences may include cross-site request-forgery attacks, denial-of-service conditions, and possibly remote code execution.

Mozilla Firefox 3.6 is vulnerable.

NOTE: This issue was previously covered in BID 38918 (Mozilla Firefox Thunderbird and Seamonkey MFSA 2010-09 through -15 Multiple Vulnerabilities) but has been assigned its own record to better document it.

last Exploits
Mozilla Firefox 3.6 – Image Preloading Content-Policy Check Security Bypass的更多信息

Disk Sorter Enterprise 9.0.24 – ‘Login’ Remote Buffer Overflow：
NoMachine < 5.3.27 - Remote Code Execution：
Konica Minolta FTP Utility 1.00 – (Authenticated) CWD Command Overflow (SEH) (Metasploit)：
Netmechanica NetDecision HTTP Server 4.5.1 – Remote Buffer Overflow (Metasploit)：
PROMOTIC 8.1.3 – Multiple Vulnerabilities：
Geovision Inc. IP Camera/Video/Access Control – Multiple Remote Command Execution / Stack Overflow / Double Free / Unauthorized Access：
Macrovision Installshield Update Service – ActiveX Unsafe Method (Metasploit)：
xAurora 10.00 – ‘RSRC32.dll’ DLL Loading Arbitrary Code Execution：