Mozilla Firefox Cascading Style Sheet (CSS) browser history information leakage Vulnerability

Release date: 2011-12-13
Updated on: 2011-12-14

Affected Systems:
Mozilla Firefox 3.x
Mozilla Thunderbird 3.x
Mozilla SeaMonkey 2.x
Mozilla SeaMonkey 1.x
Unaffected system:
Mozilla Firefox 4.0.
Mozilla Thunderbird 3.3
Mozilla SeaMonkey 2.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51051
Cve id: CVE-2011-5074

Firefox is a very popular open-source WEB browser.

Firefox has a security vulnerability in processing the CSS token sequence. Attackers can exploit this vulnerability to obtain sensitive information.

<* Source: Sid Stamm (sstamm@mozilla.com)

Link: http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Mozilla
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.mozilla.org/security/