|
Firefox Flaw Could Let Attackers Change Cookies |
|
|
|
Source: eWeek - Posted by Bill Keys
|
A bug was recently uncovered in Firefox that could allow a malicious Web site to appear authentic.
The bug affects the way Firefox handles writing to the "location.hostname" DOM property, according to a posting by security researcher Michal Zalewski on the security mailing list Full Disclosure. The vulnerability could potentially allow a malicious Web site to manipulate the authentication cookies for a third-party Web site.
By bypassing same-origin policy, attackers can possibly tamper with the way these sites are displayed or how they work. For users, this means the bug could allow for the browser to appear as if the user were connecting to a bank, when in fact the user would instead be receiving data from an attacker.
Read this full article at eWeek
Only registered users can write comments.
Please login or register. Powered by AkoComment! |
