Firefox 2.0.0.12 to Fix Chrome Protocol Directory Traversal Vulnerability
Written by Vygantas Lipskas on January 30, 2008
The upcoming Firefox 2.0.0.12 release will fix this flaw. It affects extensions (more than 600) which are installed as a set of uncompressed files instead of widely used .jar files.
Issue
A vulnerability in the chrome protocol scheme allows directory traversal when a “flat” add-on is present resulting in potential information disclosure.
Impact
When a chrome package is “flat” rather than contained in a .jar the directory traversal allows escaping the extensions directory and reading files in a predictable location on the disk. Many add-ons are packaged in this way.
A visited attacking page is able to load images, scripts, or stylesheets from known locations on the disk. Attackers may use this method to detect the presence of files which may give an attacker information about which applications are installed. This information may be used to profile the system for a different kind of attack.
Some extensions may store information in Javascript files and an attacker may be able to retrieve those. Greasemonkey user scripts may be retrieved using this method. Session storage and preferences are not readable through this technique.
Users are only at risk if they have one of the “flat” packaged add-on installed. Examples of popular add-ons that are vulnerable include: Download Statusbar and Greasemonkey.
Source: blog.mozilla.org
Web Browsers News. Subscribe to our RSS Feed.
Be the first to know. Subscribe to our RSS Feed 
or follow us on Twitter.
Comments
One Response to “Firefox 2.0.0.12 to Fix Chrome Protocol Directory Traversal Vulnerability”Trackbacks
Check out what others are saying about this post...[...] a total of 10 bug fixes (3 of them are marked as critical). The following release also fixes chrome directory traversal vulnerability. It’s highly recommended to download latest version as soon as [...]