724247 - Mozilla Firefox 10.0 Address Bar Spoofing Vulnerability.

Status: RESOLVED DUPLICATE of bug 724599

(Core Graveyard :: Security: UI, defect)

Description

[Mario Gomes]

Attachment: Vulnerability Proof of concept.

User Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.3 Safari/535.19

Steps to reproduce:

Hi,

When you drag a URL into the address bar of the Mozilla Firefox open the page automatically, but if an attacker to convince the victim to drag an address of a site, and follow with "window.stop ();" the address remains in dragging address bar, thus allowing the attacker to make phishing attacks.

Reproduce:
1. Open PoC.html attached.
2. Drag the text in address bar.
3. See the address bar(in PoC "www.google.com.br").

Regards,
Mario.

Comment 1

[Mario Gomes]

Feedback?Suggestion?Informations?

Comment 2

[Daniel Veditz [:dveditz]]

duplicate of jordi's bug?

Comment 3

[Al Billings [:abillings - ex-MoCo]]

(In reply to Daniel Veditz [:dveditz] from comment #2)
> duplicate of jordi's bug?

You mean bug 700080?

Comment 4

[Daniel Veditz [:dveditz]]

I guess I was thinking more of bug 714631. Different PoC but seem to be the same underlying flaw.

Comment 5

[Daniel Veditz [:dveditz]]

Actually not quite as good a spoof as bug 714631 on SSL sites, these aren't quite the same.

Comment 6

[Mario Gomes]

Heh. Goodbye chance of bounty. :(

Comment 7

[:Gavin Sharp [email: [e-mail]]]

Actually this looks like a dupe of bug 724599 and its dependent bugs.

Comment 8

[Al Billings [:abillings - ex-MoCo]]

Well, this was logged two days earlier, leaving the "dupe" issue open to debate. That bug has all of the work on it though.

Comment 9

[:Gavin Sharp [email: [e-mail]]]

My use of the word "dupe" has no negative connotation - I was just suggesting that both bugs stem from the same underlying issue. Both reports are valid and useful - which way they get marked (or which one ends up tracking the work) is entirely arbitrary.