A remote attacker can create a specially crafted webpage, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing HTML content. The vulnerability allows a remote attacker to execute arbitrary code on the target system.

MitigationĬWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer The page would be able to steal the authentication tokens. Tricked a user into copy and pasting the image link back to the page, By embedding an image that triggered authentication flows - inĬonjunction with a Content Security Policy that stopped a redirectionĬhain in the middle - the final image URL could be one that contained anĪuthentication token used to takeover a user account. The vulnerability exists due to incorrect implementation of the 'Copy Image Link' context menu action, which copies the final image URL after redirects. The vulnerability allows a remote attacker to gain access to potentially sensitive information. Is there known malware, which exploits this vulnerability? How the attacker can exploit this vulnerability? cpe:2.3:a:mozilla:mozilla_firefox:93.0:*:*:*:*:*:*:*Ĭan this vulnerability be exploited remotely?.

Redirect, this would be a same-origin-violation leaking data the WebĮxtension should have access to. If the WebĮxtension lacked the WebRequest permission for the hosts involved in the When a user loaded a Web Extensions context menu, the Web ExtensionĬould access the post-redirect URL of the element clicked. The vulnerability exists in the way the post-redirect URL of the element is handled. The vulnerability allows a remote attacker to bypass implemented security restrictions.

Mozilla firefox download cz