Full Disclosure: Re: More URI Handling Vulnerabilites (FireFox Remote Command Execution)

[<auto390084 () hushmail com>]

These are also protocols recognized by firefox and acted upon. You 
are prompted about opening each with the applicable application. Be 
interesting if anyone can do something with it as well:

htafile:
htmlfile:
asffile:
exefile:
urlfile:

etc

so far accepting the prompt doesn't invoke the application, just on 
quick testing though ;-)

--
HASH(0x87b3770)
HASH(0x8c4b628)
http://tagline.hushmail.com/fc/Ioyw6h4eqxckDCeqoGcr84EDCOEAtr81ztpfUVca9W8VliCkAOgx6o/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/