Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2005-07-13T04:00:00

Updated: 2024-08-07T22:22:48.659Z

Reserved: 2005-07-13T00:00:00

Link: CVE-2005-2266

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-07-13T04:00:00.000

Modified: 2024-11-20T23:59:10.227

Link: CVE-2005-2266

cve-icon Redhat

Severity : Moderate

Publid Date: 2005-07-12T00:00:00Z

Links: CVE-2005-2266 - Bugzilla