cve/2005/CVE-2005-2263.md
2024-06-18 02:51:15 +02:00

18 lines
843 B
Markdown

### [CVE-2005-2263](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2263)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20n%2Fa%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.
### POC
#### Reference
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202
#### Github
No PoCs found on GitHub currently.