Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities
From: "Guasconi Vincent" <tyoptyop () gmail com>
Date: Sun, 1 Jul 2007 01:17:57 +0200

On 6/30/07, carl hardwick <hardwick.carl () gmail com> wrote:
New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities:
This demo is very simple. when you input some text in the textarea,
the file input element's value will also change to it. I tested it on
Firefox 1.5.0.12 and 2.0.0.4.

PoC here: http://yathong.googlepages.com/FirefoxFocusBug.html

Is there a link between your POC and this :
http://lcamtuf.coredump.cx/focusbug/

?

credits by - Hong

mmmhh...

-- 
Guasconi Vincent
Etudiant.
http://altmylife.blogspot.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]