Month: August 2004

Disclosure: Tabbrowser Preferences (TBP) Extension for Mozilla Cross-tab HTTP Referer Header Remote Information Disclosure

[This was originally published on the Mozilla bug tracker and touched up for style and mirrored on attrition.org. VulnDB 8323.] User-Agent: Firefox/0.9.2 (Windoze XP; U) [en]Build Identifier: Firefox/0.9.2 (Windows XP; U) [en] “Load URLs typed into the address bar in new tabs” is selected (not sure if this is part of Tabbrowser Preferences 0.6.5 extension…

August 5, 2004

Disclosure: Tabbrowser Preferences (TBP) Extension for Mozilla Cross-tab HTTP Referer Header Remote Information Disclosure