FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mozilla -- NULL bytes in FTP URLs

Affected packages
		firefox	<	0.9.3
		linux-mozilla	<	1.7.2
		linux-mozilla-devel	<	1.7.2
		mozilla	<	1.7.2,2
1.8.a,2	<=	mozilla
		mozilla-gtk1	<	1.7.2

Details

VuXML ID	7c188c55-0cb0-11d9-8a8a-000c41e2cdad
Discovery	2004-07-11
Entry	2004-09-22
Modified	2004-09-24

When handling FTP URLs containing NULL bytes, Mozilla will interpret the file content as HTML. This may allow unexpected execution of Javascript when viewing plain text or other file types via FTP.

References

CVE Name	CVE-2004-0760
URL	http://bugzilla.mozilla.org/show_bug.cgi?id=250906