Apple Mac OSX Mozilla/Netscape /Firefox Browsers XPCOM Plug-In内容欺骗漏洞

漏洞信息详情

Apple Mac OSX Mozilla/Netscape
/Firefox Browsers XPCOM Plug-In内容欺骗漏洞

• CNNVD编号：CNNVD-200412-164
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2004-1753
  
• 漏洞类型：
  
  
  访问验证错误
  
• 发布时间：
  
  2004-12-31
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  mozilla
• 漏洞来源：
  Discovery of this …

用于MacOS X 10.3.5上的Netscape 7.1和7.2版本， Mozilla 1.7.2版本和Firefox 0.9.3版本的Apple Java plugin在分页浏览时不能正确处理SetWindow(空)调用。Java applets可以利用该漏洞从一个标签逼近另一个标签，并使欺骗标签的网络钓鱼攻击更容易。

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com .
@securityfocus.com>

来源: XF
名称: netscape-java-tab-spoofing(17137)
链接:http://xforce.iss.net/xforce/xfdb/17137

来源: BID
名称: 11059
链接:http://www.securityfocus.com/bid/11059

来源: BUGTRAQ
名称: 20040827 Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State)
链接:http://www.securityfocus.com/archive/1/373309

来源: BUGTRAQ
名称: 20040827 Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State)
链接:http://www.securityfocus.com/archive/1/373232

来源: BUGTRAQ
名称: 20040826 Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State)
链接:http://www.securityfocus.com/archive/1/373080

来源: SECUNIA
名称: 12392
链接:http://secunia.com/advisories/12392

来源: bugzilla.mozilla.org
链接:http://bugzilla.mozilla.org/show_bug.cgi?id=162134