Description
Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window.
References
- 20070713 MSIE7 entrapment again (+ FF tidbit) mailing-list
- 2892 third-party-advisory