299189 - Frame Injection Vulnerability when multiple Firefox windows are open

Status: VERIFIED DUPLICATE of bug 296850

(Firefox :: Security, defect)

Description

[Dave]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

This security vulnerability has been documented elsewhere (Secunia's security
site - as given URL) but still seems unresolved. It could potentially allow
hackers to write information on other people's websites (if a user had both a
legitimate and a hacked website open at the same time).

Reproducible: Always

Steps to Reproduce:
The info given by Secunia makes clear exactly what this security issue is and
how to reproduce it.




This flaw is Firefox security was recently reported in the UK's Computer Active
Magazine (23rd June to 6th July - issue 192) and runs the risk of compromising
Firefox's  generally good security reputation.

Comment 1

[Daniel Veditz [:dveditz]]

This will be fixed in the next Firefox update

*** This bug has been marked as a duplicate of 296850 ***