CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
Percentile
80.7%
Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a
redirect’s target URL, for the session of a specific user of a web site, by
placing the site’s URL in the HREF attribute of a stylesheet LINK element,
and then reading the document.styleSheets[0].href property value, related
to an IFRAME element.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 8.04 | noarch | xulrunner-1.9.2 | < 1.9.2.6+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |