The Wizz RSS Reader contains a vulnerability that may allow an attacker to take any action that Mozlla Firefox can.
The Mozilla Firefox user interface components outside of the content area are created using chrome. This includes toolbars, menu bars, progress bars, and window title bars. Chrome provides content, locale, and skin information for the user interface. The Wizz RSS reader is an extension to Mozilla Firefox that searches and displays RSS feeds.
A remote unauthenticated attacker may be able to take any action that Mozilla Firefox is capable of performing. This includes downloading arbitrary files, redirecting browser requests, and access stored passwords.
Thanks to the N-CIRT Lab for reporting this vulnerability.
This document was written by Ryan Giobbi.
|Date First Published:||2007-04-16|
|Date Last Updated:||2007-04-17 13:49 UTC|