Description
Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into saving a bookmarklet with a data: scheme, which is executed in the context of the last visited web page.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 12 | | =43.1-1 || =44.0-1 || =44.1-1 || =44.2-1 || =44.3-1 || =44.5-1 || =44.5-2 || =44.6-1 || =44~rc-1 || =45.0-1 || =45.1-1 || =45.2-1 || =45~beta-1 || =46.0-1 || =46.0-2 || =46.1-1 || =46.2-1 || =46.3-1 || =46~alpha-1 || =46~beta-1 || =47.0-1 || =47.2-1 || =47~beta-1 || =47~rc-1 || =48.0-1 || =48.1-1 || =48.2-1 || =48.3-1 || =48.3-2 || =48.5-1 || =48.5-2 || =48.5-3 || =48~beta-1 || =48~rc-1 || =48~rc-2 || =49.0-1 || =49.1-1 || =49.2-1 || =49.2-2 || =49.2-3 || =50.3-1 || =50.3-2 || =50.4-1 || =50.4-2 || =51.0-1 || =51.1-1 || =51~rc-1 |
debian 14 | | =48.3-2 || =48.5-1 || =48.5-2 || =48.5-3 || =49.0-1 || =49.1-1 || =49.2-1 || =49.2-2 || =49.2-3 || =50.3-1 || =50.3-2 || =50.4-1 || =50.4-2 || =51.0-1 || =51.1-1 || =51~rc-1 |
debian 13 | | =48.3-2 || =48.5-0+deb13u1 || =48.5-1 || =48.5-2 || =48.5-3 || =49.0-1 || =49.1-1 || =49.2-1 || =49.2-2 || =49.2-3 || =50.3-1 || =50.3-2 || =50.4-1 || =50.4-2 || =51.0-1 || =51.1-1 || =51~rc-1 |
