Unscored CVE-2009-4130 EUVD-2009-4100GHSA-33x3-2r59-2wch

Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to s…

Published Dec 14, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to spoof the origin domain name of a script via a long name.

References

firefox-makescriptdialogtitle-spoofing(54612) vdb-entry
20091205 Mozilla Firefox JavaScript Prompt Spoofing Weakness mailing-list
37232 vdb-entry
1023287 vdb-entry