CVE:CVE-2007-6589
CNNVD:CNNVD-200712-365
Mozilla Firefox和SeaMonkey中的jar protocol handler在URL参数默认HTTP改变时不升级原域。远程攻击者可以借助一个URI jar进行跨站脚本攻击(XSS)。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.9,and avoid the version (,2.0.0.9]; Upgrade mozilla seamonkey to a higher version than 1.1.6,and avoid the version (,1.1.6]