Launching local programs through FileType handler

07.25.07 - 02:15pm

Issue
We are currently investigating an issue on Windows XP, where some urls for “web” protocols that contain %00 launch the wrong handler and appear to be able to launch local programs, with limited argument passing.

Impact
The impact to users is unknown at this point in time. We are working to verify this and in the meantime, advise users to be cautious when browsing unknown sites.

Status
We are currently working on a fix. You can follow our work and process at: https://bugzilla.mozilla.org/show_bug.cgi?id=389580

Credit
Billy Rios and Nate McFeters posted details about this issue publicly at:http://xs-sniper.com/blog/remote-command-exec-firefox-2005/

Category: Firefox, Security, Vulnerabilities |

← Related Security Issue in URL Protocol Handling on Windows Firefox 2.0.0.6 now available →

The Buzz {8 trackbacks/pingbacks}

  1. Pingback: Techzi » Blog Archive » Mozilla flaw attack code published on July 25, 2007
  2. Pingback: Mozilla flaw attack code published on July 25, 2007
  3. Pingback: University Update - Firefox - Permanent Link to Launching local programs through FileType handler on July 25, 2007
  4. Pingback: Mozilla’s Latest Firefox Security Issue » SELaplana on July 26, 2007
  5. Pingback: Dimension 2k : Blog Archive : Remote Command Execution Bug im Mozilla on July 26, 2007
  6. Pingback: Security Tips » Firefox Fixes FileType Flaw on July 26, 2007
  7. Pingback: Mozilla flaw attack code published « TechTitans™ on July 26, 2007
  8. Pingback: » Protocol abuse adds to Firefox, Windows security woes | Ryan Naraine’s Zero Day | ZDNet.com on July 26, 2007

Sorry, comments for this entry are closed at this time.