Your submission was sent successfully! Close

CVE-2007-1116

Published: 26 February 2007

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history.

Priority

Unknown

Status

Package Release Status
xulrunner
Launchpad, Ubuntu, Debian
Upstream Needs triage