Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object. NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 01:58
Type | Values Removed | Values Added |
---|---|---|
Summary | Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object. NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status |
Information
Published : 2006-07-06 01:05
Updated : 2024-08-07 19:15
NVD link : CVE-2006-3352
Mitre link : CVE-2006-3352
CVE.ORG link : CVE-2006-3352
JSON object : View
Products Affected
mozilla
- firefox
CWE