Back to search
CVE-2010-0648
Published: Feb 18, 2010
Modified: Aug 7, 2024
PUBLISHED
Description
Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://code.google.com/p/chromium/issues/detail?id=32309
x_refsource_MISC
oval:org.mitre.oval:def:12665
vdb-entry
signature
x_refsource_OVAL
FEDORA-2010-8360
vendor-advisory
x_refsource_FEDORA
FEDORA-2010-8379
vendor-advisory
x_refsource_FEDORA
FEDORA-2010-8423
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now