Michael Krax

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 1.x before 1.5 Mozilla Firefox versions 1.0.x before 1.0.8 Mozilla Suite versions prior to 1.7.13 SeaMonkey versions prior to 1.0 Description: The issue allows remote attackers to trick users into downloading and saving an executable file. This is achieved by using an image that is overlaid by a transparent image link pointing to the executable. When the user clicks the "Save image as..." option, the executable is saved. The attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename. Recommendations: For Mozilla Firefox versions 1.x before 1.5, update to version 1.5 or later. For Mozilla Firefox versions 1.0.x before 1.0.8, update to version 1.0.8 or later. For Mozilla Suite versions prior to 1.7.13, update to version 1.7.13 or later. For SeaMonkey versions prior to 1.0, update to version 1.0 or later.

The issue allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.

The issue is related to improper implementation of security checks for script injection, allowing remote attackers to execute scripts via `javascript:` URLs. This can be achieved through various methods, including using a `javascript:` URL in a `view-source:` URL, a `javascript:` URL in a `jar:` URL, or a nested variant.

The issue allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the `href` attribute. This is related to the favicon functionality.

The issue allows remote attackers to replace existing search plugins with malicious ones, potentially leading to the execution of malicious scripts. This is achieved by using the `sidebar.addSearchEngine` functionality with the same filename as the target engine, which may not be visible in the GUI.

The issue allows remote attackers to execute arbitrary script and code via a new search plugin using the `sidebar.addSearchEngine` function.

The issue allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar. This is related to insufficient addressing of attack vectors for loading chrome files and hijacking drag and drop events.

The issue allows remote attackers to spoof the security and download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file.

The issue allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames. This can be demonstrated using certain XUL events when a user drags a scrollbar two times.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary HTML and web script via search parameters.

A cross-site scripting issue allows remote attackers to execute arbitrary web script or HTML via the `config` parameter, which is not properly sanitized before it is displayed in an error message.

The issue allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser. This occurs when an executable file with a dangerous extension, such as .bat or .exe, is dragged to the desktop despite having an image/gif content type.

The issue allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, also known as "Fireflashing."

The issue allows remote attackers to execute arbitrary code via drag and drop events.

The issue allows remote attackers to bypass the security model by dragging a javascript: or data: URL to a tab, due to the failure of invoking the Javascript Security Manager. This is related to a technique known as "firetabbing."

Name of the Vulnerable Software and Affected Versions: CVSTrac versions prior to 1.1.5 Description: The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities are located in the main.c and login.c files, allowing remote attackers to inject arbitrary HTML and web script. Recommendations: For versions prior to 1.1.5, update to version 1.1.5 or later to resolve the issue.