Mozilla Flaw Lets Links Run Arbitrary Programs

[jrzycrim]

Mozilla Flaw Lets Links Run Arbitrary Programs

The Mozilla Foundation has confirmed findings that its Mozilla and Firefox browsers are vulnerable to attacks using the "shell:" scheme, which execute arbitrary code under Windows without the user having to click a link.

http://www.eweek.com/article2/0,1759,1621463,00.asp

Fix:

http://update.mozilla.org/extensions/moreinfo.php?id=154