Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
info
discussion
exploit
solution
references
Mozilla Browser/Firefox Arbitrary Command Execution Vulnerability
References:
Firefox 1.0.7 Release Notes
(Mozilla)
MFSA 2005-59 - Command-line handling on Linux allows shell execution
(Mozilla)
Mozilla 1.7.12
(Mozilla)
Mozilla Homepage
(Mozilla Foundation)
RHSA-2005:785-9 - Critical: firefox security update
(RedHat)
RHSA-2005:789-11 - Critical: mozilla security update
(RedHat)
URLs passed on the command line are parsed by the shell (bash).
(peterzelezny@dodo.com.au)
Privacy Statement
Copyright 2008, SecurityFocus
