Ades Blog, No Monkeys Here!

Friday, February 25, 2005

Firescrolling - Firefox Vulnerability POC

As many of you know, Im into the whole security vibe and tend to keep a close eye on such matters. This vulnerability, over at mikx.de, caught my eye as its for Firefox and DOES work in Linux or Win32. The POC works by combining a couple of Firefox exploits with a bit of Javascript and XUL, with very worrying results. (the POC it drops a text file in the home folder of your system but it reports that it has full XPCOM access). This is not good, not good at all.

2 Comments:

  • Apparently it's been resolved in 1.01

    mrBen

    By Anonymous Anonymous, at 10:53 pm  

  • Thats good to know, I will have to update

    By Blogger Ade, at 12:03 am  

Post a Comment

<< Home