full-disclosure - Re: Mozilla protocol abuse

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <997ef2c20707251153u5d6144d0t955f058f2ad72fcb@mail.gmail.com>
Date: Wed, 25 Jul 2007 14:53:38 -0400
From: "Nate McFeters" <nate.mcfeters@...il.com>
To: seclists@...holm.com
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: Mozilla protocol abuse

Very nice Thor... I totally expected Thunderbird to have these same
problems...

I'm sure we'll see more of these in the future as well.

Nate McFeters


On 7/25/07, Thor Larholm <seclists@...holm.com> wrote:
>
> The Mozilla application platform currently has an unpatched input
> validation flaw which allows you to specify arbitrary command line
> arguments to any registered URL protocol handler process. Jesper
> Johansson already detailed parts of this on his blog on July 20,
> http://msinfluentials.com/blogs/jesper/. I wrote a vulnerability report
> on July 18 together with a proof-of-concept exploit that targeted
> Thunderbird 2.0.0.4.
>
> Thunderbird 2.0.0.5 was released on July 19 and incidentally fixed this
> specific attack vector through its "osint" command line flag. It is now
> 6 days later and people should have had time to update their Thunderbird
> installations, so I have decided to publish my vulnerability report
> together with the exploits as they detail how to handle XPI exploitation.
>
> The HTML version can be found at
>
> http://larholm.com/2007/07/25/mozilla-protocol-abuse/
>
> A ZIP file with the report and the XPI exploits can be found at
>
> http://larholm.com/media/2007/7/mozillaprotocolabuse.zip
>
>
> Cheers
> Thor Larholm
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/