EIP-2026-118814
PRE-CVEMicrosoft Internet Explorer 5 / Firefox 0.8 / OmniWeb 4.x - URI Protocol Handler Arbitrary File Creation/Modification
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118814. PoCs published by Karol Wiesek.
AI-analyzed exploit summary This is a vulnerability writeup describing a URI handling flaw in multiple vendors' products, where a '-' character preceding the hostname allows passing arbitrary options to protocol handlers like telnet, rlogin, ssh, and mailto. Successful exploitation could lead to arbitrary file creation/modification or denial of service in the browser context.
Description
Microsoft Internet Explorer 5 / Firefox 0.8 / OmniWeb 4.x - URI Protocol Handler Arbitrary File Creation/Modification
Exploits (1)
This is a vulnerability writeup describing a URI handling flaw in multiple vendors' products, where a '-' character preceding the hostname allows passing arbitrary options to protocol handlers like telnet, rlogin, ssh, and mailto. Successful exploitation could lead to arbitrary file creation/modification or denial of service in the browser context.