OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Firefox 1.5.0.3 Flaw - Page can obtain path to Mozilla installation or profile by examining JavaScript exceptions

milw0rmgmail.com
Date: Sun May 21 2006 - 08:20:48 CDT


if the exception raises in some extension in the user profile and the page can catch path to the user profile and so a remote attacker will know the user login

PoC: https://bugzilla.mozilla.org/attachment.cgi?id=164547