Mozilla Security Blog
Categories: Firefox Security

Launching local programs through FileType handler

Window Snyder

8 responses

Issue
We are currently investigating an issue on Windows XP, where some urls for “web” protocols that contain %00 launch the wrong handler and appear to be able to launch local programs, with limited argument passing.

Impact
The impact to users is unknown at this point in time. We are working to verify this and in the meantime, advise users to be cautious when browsing unknown sites.

Status
We are currently working on a fix. You can follow our work and process at: https://bugzilla.mozilla.org/show_bug.cgi?id=389580

Credit
Billy Rios and Nate McFeters posted details about this issue publicly at:http://xs-sniper.com/blog/remote-command-exec-firefox-2005/

8 comments on “Launching local programs through FileType handler”

  1. Ping from Techzi » Blog Archive » Mozilla flaw attack code published on

    […] security chief, Window Snyder, said that her team is working to verify and fix this latest […]

  2. Ping from Mozilla flaw attack code published on

    […] security chief, Window Snyder, said that her team is working to verify and fix this latest […]

  3. Ping from University Update - Firefox - Permanent Link to Launching local programs through FileType handler on

    […] Link to Article firefox Permanent Link to Launching local programs through FileType handler » […]

  4. Ping from Mozilla’s Latest Firefox Security Issue » SELaplana on

    […] about the latest release of the Mozilla’s Firefox browsers and is now currently examined by Mozilla. We are currently investigating an issue on Windows XP, where some urls for “web” protocols […]

  5. Ping from Dimension 2k : Blog Archive : Remote Command Execution Bug im Mozilla on

    […] Mozilla Security Blog]  Kategorien Software |  Security |  Internet  Tags bug, FireFox, […]

  6. Ping from Security Tips » Firefox Fixes FileType Flaw on

    […] browsers. The very limited %00 argument needed to spur local program execution raised concerns at Mozilla, though the actual impact of such execution hadn’t been […]

  7. Ping from Mozilla flaw attack code published « TechTitans™ on

    […] security chief, Window Snyder, said that her team is working to verify and fix this latest […]

  8. Ping from » Protocol abuse adds to Firefox, Windows security woes | Ryan Naraine’s Zero Day | ZDNet.com on

    […] security chief Window Snyder has posted a confirmation of the latest issue: We are currently investigating an issue on Windows XP, where some urls for “web” protocols […]