Mozilla Firefox 44.0b2 Local Cross-site Scripting Vulnerability

WARNING! Fake news / Disputed / BOGUS

Mozilla Firefox 44.0b2 Local Cross-site Scripting Vulnerability

2016.01.11

Credit: Amir

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

BOGUS:
Reason: Well know issue. Next time please check google

#################################

#
#     @@@    @@@@@@@@@@@    @@@@@           @@@@@@@@@@            @@@  @@@@@@@
#     @@@    @@@@@@@@@@@    @@@  @@         @@@     @@            @@@  @@@@@@@@  
#     @@@    @@@            @@@    @@       @@@       @@          @@@  @@@  @@@  
#     @@@    @@@            @@@      @@     @@@     @@            @@@  @@@  @@@  
#     @@@    @@@@@@@@@@@    @@@       @     @@@@@@@@@@            @@@  @@@@@@
#     @@@    @@@@@@@@@@@    @@@     @@      @@@     @@            @@@  @@@@@@
#     @@@    @@@            @@@   @@        @@@       @@   @@@    @@@  @@@ @@@
#     @@@    @@@            @@@ @@          @@@     @@     @@@    @@@  @@@  @@@
#     @@@    @@@@@@@@@@@    @@@@@           @@@@@@@@@@     @@@    @@@  @@@   @@@
#

#####################################

         Iranian Exploit DataBase
TiTle : Mozilla Firefox 44.0b2 Local Cross-site Scripting Vulnerability
Affected Product : Mozilla Firefox 44.0b2 7 and Old Version
Risk : High
Tested on :  Android,Windows7,Xp
Vendor site : http://mozilla.org
Author : Amir
Email : Iedb.team@gmail.com
Home : http://iedb.ir - http://xssed.ir
Archive Exploit : http://iedb.ir/exploits.php?id=4505
#####################################
Description :

The vulnerability, our xss code for local runs in Mozilla web browser.
The vulnerability is local and based on the: data: text / html is on version 44.0 beta and the old version, the answer will be.

Users can xss code with Base64 algorithm Encode it to the browser, and the variable data: text / html; base64, added.

Example :
Xss Code : '"><script>alert('IeDb.Ir And Xssed.Ir')</script>
We're Encode This code :
JyI+PHNjcmlwdD5hbGVydCgnaHR0cDovL2llZGIuaXIgJiBodHRwOi8veHNzZWQuaXIgKiBBbWlyIConKTwvc2NyaXB0Pg==
And to this we add the code Xss and then we run in the browser:
data:text/html;base64,[Xss Encoded]

Demo :
data:text/html;base64,JyI+PHNjcmlwdD5hbGVydCgnaHR0cDovL2llZGIuaXIgJiBodHRwOi8veHNzZWQuaXIgKiBBbWlyIConKTwvc2NyaXB0Pg==

Run To Mozilla

Photo:

http://iedb.ir/Bug/Mozilla.jpg

#####################################
Thanks to all the friends and Iranian hackers, and thank all the members http://Iedb.Ir And IrIsT.Ir Team
Home : http://iedb.ir - http://xssed.ir - http://iedb.ir/acc
http://iedb.ir :   This site, for recording bugs and vulnerabilities and exploits will be in it.(Iranian Exploit DataBase)
http://Xssed.Ir : On this site, all bugs Xss and Sql which sites are placed.Be sure to check the site and sites vulnerable to it.
#####################################
Archive Exploit : http://iedb.ir/exploits.php?id=4505
#####################################

References:

http://iedb.ir/Bug/Mozilla.jpg

https://twitter.com/0xBADCA7/status/686481384836313089

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Mozilla Firefox 44.0b2 Local Cross-site Scripting Vulnerability

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.