CVE-2010-0168
Firefox < 3.6.2 - Denial of Service via IMG SRC Attribute URL Scheme Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-0168. PoCs published by Josh Soref.
AI-analyzed exploit summary This exploit leverages a security-bypass vulnerability in Mozilla Firefox 3.6 by using an <img> tag to load a local file (file:///dev/tty), bypassing content-loading policies. The impact could include cross-site request forgery, denial-of-service, or potential remote code execution depending on context.
Description
The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser's add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.
Exploits (1)
This exploit leverages a security-bypass vulnerability in Mozilla Firefox 3.6 by using an <img> tag to load a local file (file:///dev/tty), bypassing content-loading policies. The impact could include cross-site request forgery, denial-of-service, or potential remote code execution depending on context.