Collected research

Firefox 2 and WebKit nightly cross-domain image theft

CESA-2008-009

Chris Evans · scary.beasts.org

Firefox 2 before 2.0.0.18 and WebKit nightlies could be fooled about an image's origin by loading it via a same-origin URL that 302-redirects to the remote target. The browser treats the result as local, so canvas getImageData reads its pixels and the page steals authenticated images cross-domain. The same trick enumerates installed applications. CVE-2008-5012, MFSA 2008-48.

Record

Document

CESA-2008-009

Researcher

Chris Evans

Published by

scary.beasts.org

Topic

Browser

In the archive

• Collected in the 2008 research round

Tags

• sop-bypass
• same-origin-policy
• info-leak
• browser-fingerprinting
• cve
• vendor-advisory
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Chris Evans, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.