Address Bar Spoofing Vulnerability in Mozilla Firefox, SeaMonkey, and Flock
CVE-2009-3007

Currently unrated

Key Information:

Vendor

Flock

Status
Flock
Seamonkey
Firefox
Vendor
CVE Published:
28 August 2009

What is CVE-2009-3007?

The vulnerability allows an attacker to spoof the browser's address bar by utilizing the 'window.open' method with a relative URI. This can result in an arbitrary file URL being displayed, which can mislead users into believing they are visiting a legitimate site. The attack requires the victim to have previously visited a specially crafted file URL, which facilitates successful spoofing. This could potentially expose users to phishing attacks and unauthorized access to sensitive information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/53010
vdb-entryx_refsource_XF
http://lostmon.blogspot.com/2009/08/multiple-browsers-fak...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.