OSVDB ID: 43458 Title: Mozilla Multiple Products XPCNativeWrapper js_GetClassPrototype .prototype Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs." |
Classification |
Disclosure:
Vendor Verified
|
Solution |
Upgrade to Firefox version 2.0.0.12, Thunderbird 2.0.0.12, Seamonkey 1.1.8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
Credit |
Unknown or Incomplete |