Firefox 'tabs' exploitation/vulnerability

[Eric]

A research firm know as Secunia Research has discovered two vulnerabilities in Firefox(and many other browsers which have the 'tabbed browsing' feature), which can be exploited by malicious web sites to obtain sensitive information and spoof dialog boxes.

1). Inactive tabs can launch dialog boxes so they appear to be displayed by a web site in another tab. This can be exploited by a malicious web site to show a dialog box, which seems to originate from a trusted web site. Successful exploitation would normally require that a user is tricked into opening a link from a malicious web site to a trusted web site in a new tab.

Other vulnerable browsers:

* Konqueror
* Opera
* Netscape
* Avant
* MyIE/Maxthon
* Safari

2). Inactive tabs can gain focus from form fields on web sites in another tab. This can potentially be exploited to collect sensitive data entered in form fields on other web sites. Successful exploitation would normally require that a user is tricked into opening a link from a malicious web site to a trusted web site in a new tab.

Other vulnerable browsers:

* Netscape
* Avant Browser
* MyIE/Maxthon

I always knew that an exploit like this would pop up sooner or later :/...I'm not a darn bit surprised...So we can now see that even the best browsers have security issues sadly

[Ashes]

At least it's a user issue, and not inherent in the browser like the .jpg attacks through IE.