OSVDB ID: 84999 Title: Mozilla Multiple Product DOMParser text/html Data Parsing Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Multiple Mozilla products contain a flaw that may lead to an unauthorized information disclosure. The issue is triggered by an error in the DOMParser when it is used to parse text or HTML data. This will disclose potentially sensitive information to a remote attacker. |
Classification |
Location:
Context Dependent
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Upgrade Exploit: Exploit Private Disclosure: Vendor Verified, Coordinated Disclosure OSVDB: Web Related |
Solution |
Upgrade Firefox and Thunderbird to version 15 or higher or SeaMonkey to version 2.12 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |