Hover over link, get owned ?

CloneRanger · Jul 14, 2010

New one to me Sounds very devious, even if it does require execution to be allowed.

CoolPreviews

A security escalation vulnerability was discovered in version 3.0.1 of the CoolPreviews add-on. The vulnerability can be triggered using a specially crafted hyperlink. If the user hovers the cursor over this link, the preview function executes remote JavaScript code with local chrome privileges, giving the attacking script control over the host computer. Version 3.0.1 and all older versions have been disabled on addons.mozilla.org, and a fixed version was uploaded and reviewed within a day of the developer being notified.

Impact to users

Proof of concept code for this vulnerability was posted on this blog, but no known malicious exploits have been reported so far. If a user has a vulnerable version installed and clicks on a malicious link that targets the add-on, the code in the malicious link will run with local privileges, potentially gaining access to the file system and allowing code download and execution.

http://blog.mozilla.com/addons/2010/07/13/add-on-security-announcement
Click to expand...

to guest for the link - https://www.wilderssecurity.com/showthread.php?p=1712306#post1712306

Stealing login details with a Google Chrome extension - http://blog.dreasgrech.com/2010/07/stealing-login-details-with-google.html

Log in or Sign up

Hover over link, get owned ?

CloneRanger Registered Member

Log in or Sign up

Hover over link, get owned ?

CloneRanger Registered Member

Useful Searches