Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip

To: quincy@xxxxxxxxx
Subject: Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
From: 3APA3A <3APA3A@xxxxxxxxxxxxxxxx>
Date: Thu, 21 Dec 2006 18:23:26 +0300
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20061220100254.8796.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: http://www.security.nnov.ru
References: <20061220100254.8796.qmail@xxxxxxxxxxxxxxxxx>
Reply-to: 3APA3A <3APA3A@xxxxxxxxxxxxxxxx>

Dear quincy@xxxxxxxxx,

It's

https://bugzilla.mozilla.org/show_bug.cgi?query_format=specific&order=relevance+desc&bug_status=__open__&id=360493

and  it  was  discussed. It can only steal password from the site if site
allows to upload form or has crossite scripting errors.

--Wednesday, December 20, 2006, 1:02:54 PM, you wrote to 
bugtraq@xxxxxxxxxxxxxxxxx:

qgc> critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a 
videoclip
qgc> PoC here: http://www.info-svc.com/news/11-21-2006/rcsr1/


-- 
~/ZARAZA
http://www.security.nnov.ru/

References:
- critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  - From: quincy

Prev by Date: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
Next by Date: SQID v0.1 - SQL Inhection Digger.
Previous by thread: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
Next by thread: Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
Index(es):
- Date
- Thread