Mozilla CSS crossite scripting

2006-01-2900:00:00

FULL-DISCLOSURE

vulners.com

-moz-binding: CSS allows to bind XBL with element and XBL may contains scripts. It may lead to crossite sripting within e.g. webmail.

CPENameOperatorVersion
netscapeeq8.1
firefoxeq1.0

CPE	Name	Operator	Version
	netscape	eq	8.1
	firefox	eq	1.0

References

vulners.com/securityvulns/securityvulns:doc:11222