Announcement

Collapse
No announcement yet.

Browser Bug Bites Tabbed Browsing.

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Browser Bug Bites Tabbed Browsing.

    http://secunia.com/advisories/12712/
    ManagerJosh, Owner of 4 XenForo Licenses, 1 vBulletin Legacy License, 1 Internet Brands Suite License
    Director, WorldSims.org | Gaming Hosting Administrator, SimGames.net, Urban Online Entertainment

  • #2
    You know this can be avoided if people simply didn't go to malicious websites.
    Translations provided by Google.

    Wayne Luke
    The Rabid Badger - a vBulletin Cloud demonstration site.
    vBulletin 5 API - Full / Mobile
    Vote for your favorite feature requests and the bugs you want to see fixed.

    Comment


    • #3
      That hardly sounds like a vulnerability. Popups are annoying at best.

      Comment


      • #4
        Originally posted by Jake Bunce
        That hardly sounds like a vulnerability. Popups are annoying at best.
        It's not about the popup, it's the fact that the previous site can record any information typed into the second site.

        MGM out

        Comment


        • #5
          Originally posted by Jake Bunce
          That hardly sounds like a vulnerability. Popups are annoying at best.
          The description effectively says that one side can access another site's form while it is open in another tab, which, albeit extremely unlikely, could lead to data theft.
          --filburt1, vBulletin.org/vBulletinTemplates.com moderator
          Web Design Forums.net: vB Board of the Month
          vBulletin Mail System (vBMS): webmail for your forum users

          Comment


          • #6
            For some reason my outdated browsers aren't vunreable?

            Comment


            • #7
              Originally posted by Floris
              For some reason my outdated browsers aren't vunreable?
              Was that a stab at Firefox as an IE fan? Cause if it is, let's go to Windows Update and see how many new IE vulnerabilities have been found

              MGM out

              Comment


              • #8
                Let me rephrase:

                My FireFox, Mozilla, Opera, Netscape and Internet Explorer appeared to have no effect running the tests. Older installations have effects - they are vunreable.

                I have a dislike for IE and use Mozilla most of the time.

                Comment


                • #9
                  Originally posted by Floris
                  Let me rephrase:

                  My FireFox, Mozilla, Opera, Netscape and Internet Explorer appeared to have no effect running the tests. Older installations have effects - they are vunreable.

                  I have a dislike for IE and use Mozilla most of the time.
                  Good to hear Sorry for the misunderstanding lol

                  And yes, FF > IE

                  MGM out

                  Comment


                  • #10
                    Not really

                    Comment


                    • #11
                      Yes really.

                      Comment


                      • #12
                        Originally posted by MetalGearMaster
                        It's not about the popup, it's the fact that the previous site can record any information typed into the second site.

                        MGM out
                        Not true.(or atleast, not precisely true)

                        Open a tab and visit a reply form on a vb forum. Open another tab and visit Google.com, and quickly switch back to the text box and start typing.(you may have problems reproducing if Google.com loads before you can switch back) As soon as Google loads the reply box will no longer get the text you're typing. Switch back to Google.com and you'll see that it got the text starting where the vb reply form left off. Hardly a case of one site being able to copy everything you put in another site; but annoying as heck.
                        TheologyWeb. We debate theology. srsly.

                        Comment


                        • #13
                          Thats actually fixed now in CVS so the next version of Mozilla and Firefox wont suffer.

                          https://bugzilla.mozilla.org/show_bug.cgi?id=124750

                          Also one of the bugs was fixed in august and the other was fixed yesterday. Still one other though.
                          Scott MacVicar

                          My Blog | Twitter

                          Comment

                          widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                          Working...
                          X