Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15432
HistoryDec 20, 2006 - 12:00 a.m.

Mozilla Foundation Security Advisory 2006-75

2006-12-2000:00:00
vulners.com
15

Mozilla Foundation Security Advisory 2006-75
Title: RSS Feed-preview referrer leak
Impact: Low
Announced: December 19, 2006
Reporter: Jared Breland
Products: Firefox 2.0

Fixed in: Firefox 2.0.0.1
Description
Jared Breland reported on LEGROOM.net that when the new "Feed Preview" feature in Firefox 2.0 retrieves the icons of the installed web-based feed viewers it is potentially informing those services of your feed-browsing habits by sending the URL of the feed in a referrer header with each icon request.

This was an oversight and has been fixed in Firefox 2.0.0.1
Workaround
Upgrade to Firefox 2.0.0.1
References
LEGROOM.net blog
https://bugzilla.mozilla.org/show_bug.cgi?id=358878
CVE-2006-6506