Quote:
|
Originally Posted by Richard M
Mozilla Firefox passed with flying colours of course. 
|
high risks 0
medium risks 1
low risks 0
Medium Risk Vulnerabilities
Mozilla Windows shell: protocol handler vulnerability (moz250180)
Description
This bug allows to open local files and folders from a web page using the shell: protocol URLs. For example "shell:windows" URL will open the Windows directory. On Windows XP it is also possible to start local programs, for example "shell:windows\system32\calc.exe" will start Calculator. It might be also possible to download and run remote programs using this vulnerability. The bug only affects Windows installations of Mozilla, Firefox and Thunderbird. If you are not running Windows your browser is not vulnerable.
But as I have never used Bifta's favourite browser, I guess there is no need to worry.
IE.6 SP2 here.
