exploits , vulnerabilities , articles , Mozilla Firefox iframe.contentWindow.focus Deleted Object Reference Vulnerability

Title	Mozilla Firefox iframe.contentWindow.focus Deleted Object Reference Vulnerability
Published	2006-04-24-12:00AM
Updated	2006-05-03-05:50PM
Class	Design Error
CVE	CVE-2006-1993
Remote	Yes
Local	No
Credit	The vendor credits Martijn Wargers, Nick Mott with the discovery of this issue. <chris@splices.org> reported this issue as well.
Vulnerable	Mozilla Firefox 1.5 .2 Mozilla Firefox 1.5 .1 Mozilla Firefox 1.5 beta 2 Mozilla Firefox 1.5 beta 1 Mozilla Firefox 1.5 Mozilla Firefox 1.5.0.2
Not Vulnerable	Mozilla Firefox 1.5 .3
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net The following proof-of-concept example can trigger a denial of service: /data/vulnerabilities/exploits/ffdos.txt
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-10-15 Adobe Flash CS3 Professional SWF File Heap Buffer Overflow Vulnerability
• 2008-10-15 Microsoft Host Integration Server RPC Remote Command Execution Vulnerability
• 2008-10-15 mini-pub Multiple Information Disclosure Vulnerabilities
• 2008-10-15 Apple Script Editor Unspecified Insecure Temporary File Creation Vulnerability
• 2008-10-15 Apple Mac OS X 10.5 Postfix Security Bypass Vulnerability
• 2008-10-15 Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability
• 2008-10-15 Exiv2 Pretty Printing for Nikon Lens Metadata Denial of Service Vulnerability
• 2008-10-14 Microsoft Windows Internet Printing Service Integer Overflow Vulnerability
• 2008-10-14 Microsoft Windows Kernel Window Creation Local Privilege Escalation Vulnerability
• 2008-10-14 Microsoft Windows Kernel Unhandled System Call Local Privilege Escalation Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 16 Oct 2008 07:29:28 +0000