Description
Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other versions and products, allows remote user-assisted attackers to obtain information such as the installation path by causing exceptions to be thrown and checking the message contents.
References
- MDKSA-2006:145 vendor-advisory
- 20244 third-party-advisory
- mozilla-javascript-path-disclosure(26667) vdb-entry
- 20255 third-party-advisory
- 21532 third-party-advisory
- 20060521 Firefox 1.5.0.3 Flaw - Page can obtain path to Mozilla installation or profile by examining JavaScript exceptions mailing-list
- 20256 third-party-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=267645
- https://bugzilla.mozilla.org/attachment.cgi?id=164547
- MDKSA-2006:143 vendor-advisory
- 960 third-party-advisory