Mozilla Foundation Security Advisory 2012-104
CSS and HTML injection through Style Inspector
- Announced
- November 20, 2012
- Reporter
- Mariusz Mlynski
- Impact
- Critical
- Products
- Firefox, Firefox ESR
- Fixed in
-
- Firefox 17
- Firefox ESR 10.0.11
Description
Security researcher Mariusz Mlynski reported that when a maliciously crafted stylesheet is inspected in the Style Inspector, HTML and CSS can run in a chrome privileged context without being properly sanitized first. This can lead to arbitrary code execution.