Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by leveraging a javascript: URL in a bookmark.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox New Tab 权限许可和访问控制漏洞
Vulnerability Description
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Mozilla Firefox 17.0之前版本中的New Tab页面中存在漏洞,该漏洞源于通过bookmarklets使用特权执行JavaScript代码。用户协助的远程攻击者利用书签中的javascript: URL,运行任意程序。
CVSS Information
N/A
Vulnerability Type
N/A