Arbitrary code execution from Firefox sidebar panel II

[Tres Seaver]

Sites can use the _search target to open links in the Firefox sidebar. Two
missing security checks allow malicious scripts to first open a privileged page
(such as about:config) and then inject script using a javascript: url. This
could be used to install malicious code or steal data without user interaction.

Fixed in: Firefox 1.0.3 / Mozilla Suite 1.7.7

Workaround: Disable Javascript

References:

 - https://bugzilla.mozilla.org/show_bug.cgi?id=290079

http://www.mozilla.org/security/announce/mfsa2005-39.html: http://www.mozilla.org/security/announce/mfsa2005-39.html

[Uphaar Agrawalla (uphaar)]

This vulnerability is fixed in Ubuntu's Firefox 1.0.2-0ubuntu5.1
http://changelogs.ubuntu.com/changelogs/pool/main/m/mozilla-firefox/mozilla-firefox_1.0.2-0ubuntu5.1/changelog

Closing as Fixed.