FEDORA-2013-16992Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html CVE-2013-1727
Mozilla Firefox 9.0.1 - Same Origin Policy Security Bypass
Record summary
CVE-2013-1727 has a selected CVSS score of 4.0; EIP currently links 1 catalogued exploit.
Description
Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting (XSS) attacks or obtain password or cookie information, by using a symlink in conjunction with a file: URL for a local file.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMozilla Firefox 9.0.1 - Same Origin Policy Security BypassExploitDB exploitby Takeshi TeradaNot analyzed1 file
References
6FEDORA-2013-17074Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html FEDORA-2013-17047Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html mozilla.orgConfirmation
http://www.mozilla.org/security/announce/2013/mfsa2013-84.html bugzilla.mozilla.orgConfirmation
https://bugzilla.mozilla.org/show_bug.cgi?id=782581 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-1727