SkipNavigation
Home | FAQ | Contact | Privacy Policy
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric
 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips
 

Vulnerability Note VU#460528

Mozilla fails to properly handle script-generated events

Overview

There is a vulnerability the way Mozilla handles script-generated events that could allow a remote, unauthenticated attacker to access data contained on the victim's clipboard.

I. Description

Mozilla is an open-source web browser, email/newsgroup client, IRC client, and HTML editor available for a number of platforms including Microsoft Windows, Linux, and other UNIX platforms. When a web page is loaded by the browser, it will accept certain JavaScript events to control behavior on the page. These script-generated events can be applied to text fields.

There is a vulnerability in the way Mozilla handles copy/paste keyboard shortcut sequences sent to text fields using JavaScript. While Mozilla restricts the use of copy (Ctrl+C) and paste (Ctrl+V) keyboard shortcut sequences, it fails to restrict other variations such as Ctrl+Ins (copy) and Shift+Ins (paste). Exploitation of this vulnerability could allow a remote, unauthenticated attacker to access the victim's clipboard.

II. Impact

By convincing a victim to view a malicious web page, a remote, unauthenticated attacker could perform read/write operations to the victim's clipboard. Since users may copy/paste usernames, passwords, or potentially other sensitive information to the clipboard, the attacker could gain access to this information.

III. Solution

Upgrade

Upgrade as specified by your vendor. This issue has been resolved in Mozilla 1.7.3, Firefox Preview Release, and Thunderbird 0.8.

Disable JavaScript

Disable JavaScript in your browser's preferences.

Systems Affected

VendorStatusDate Updated
MozillaVulnerable17-Sep-2004

References


http://bugzilla.mozilla.org/show_bug.cgi?id=257523
http://secunia.com/advisories/12526/
http://www.securitytracker.com/alerts/2004/Sep/1011317.html
http://www.securitytracker.com/alerts/2004/Sep/1011318.html

Credit

This vulnerability was reported by Wladimir Palant.

This document was written by Damon Morda.

Other Information

Date Public08/31/2004
Date First Published09/17/2004 02:09:02 PM
Date Last Updated09/17/2004
CERT Advisory 
CVE Name 
US-CERT Technical Alerts 
Metric16.87
Document Revision18

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Copyright 2004 Carnegie Mellon University
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader