NetSight
IP …
medium4.3

CVE-2008-0593

Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI …

Impact

Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.

Affected products

VendorProductAffected versions
MozillaFirefox
through 2.0.0.11
Versions 0.2, 0.9.2, 1.0.2, 1.5.0.2, 1.5.0.12
MozillaSeamonkey
All versions
through 1.1.17
Versions 1.0, 1.0.1, 1.0.2, 1.0.3

Weakness classification

CWE-200

References